VX Search Enterprise v9.7.18 is vulnerable to a buffer overflow vulnerability when importing a maliciously crafted XML file. By sending a specially crafted XML file, an attacker can cause a buffer overflow, which can be used to execute arbitrary code. The vulnerability is caused by the lack of proper validation of user-supplied input when importing an XML file.
This exploit uses a local file inclusion vulnerability to inject PHP code into the username field of the login page, which is then used to change the root password for SSH.
This exploit uses a script to profile.d and reboot the device. When it comes back online then nc to port 1270. The script is sent to the device using the PJL FSDOWNLOAD command. The script is then queried using the PJL FSQUERY command. Finally, the SNMP SET command is used to reboot the device.
SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via the id parameter to wp-admin/admin.php.
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php.
When parsing AVI files, CAVIFileParser uses the stream count from the AVI header to allocate backing storage for storing metadata about the streams (member variable m_aStream). However, the number of stream headers we parse is never validated against this allocation size during parsing, so we can write further metadata past the end of this buffer by constructing a file which contains more stream headers than expected. Several of the values that we can get written out of bounds are pointers to controlled data, which is an interesting exploitation primitive.
Multiple parameters in the Real Estate Classifieds Script are vulnerable to SQL Injection, allowing an attacker to execute arbitrary SQL commands on the underlying database.
SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php.
Easy File Sharing Web Server 7.2 is vulnerable to a buffer overflow vulnerability when handling a maliciously crafted POST request. This can be exploited to execute arbitrary code by sending a specially crafted HTTP request containing an overly long string in the 'Email' parameter.
Nuevo mailer version 6.0 and below is vulnerable to SQL injection. The vulnerable script is rdr.php and the vulnerable parameter is r. The proof of concept is to send a request to the vulnerable script with the vulnerable parameter and a malicious payload. For example, https://vulnerable_site.com/inc/rdr.php?r=69387c602c1056c556%20and%20sleep(10)--+
Services By CQR