op5 has a CSRF entry point that can be used to execute arbitrary remote commands on op5 system sent via HTTP GET requests, allowing attackers to completely takeover the affected host, to be victimized a user must be authenticated and visit a malicious webpage or click an infected link.
Express Zip doesn't validates ' .. ' which makes possible to do a path traversal attack which can be converted easily to RCE. This quick and dirt code is written only for demonstration purposes.
This exploit is for educational purposes only. It is a buffer overflow exploit for Multi Emulator Super System (MESS) version 0.154-3.1. The exploit uses a combination of junk data, shellcode, NOPs and EIP to execute arbitrary code on the target system.
Panda Endpoint Administration Agent v7.30.2 allows a local attacker to elevate his privileges from any account type (Guest included) and execute code as SYSTEM, thus completely compromising the affected host.
We have fixed an old and very known weakness in the Linux ASLR implementation. Any user able to running 32-bit applications in a x86 machine can disable the ASLR by setting the RLIMIT_STACK resource to unlimited. Following are the steps to test whether your system is vulnerable or not: Create a dummy program which shows its memory map, compile it, and run the application to check that ASLR is working. If the libc-2.19.so library is mapped at random positions, then ASLR is working properly. However, if the libc-2.19.so library is always mapped at the same position, then ASLR is not working.
The vulnerability exists due to insufficient filtration of input data passed via the "orderby" HTTP GET parameter to "/index.php" script. A remote unauthenticated attacker can modify present query and execute arbitrary SQL commands in application's database. A simple exploit below uses time-based SQL injection technique to demonstrate existence of the vulnerability.
Asbru WCM suffers from multiple vulnerabilities including Cross-Site Request Forgery, Stored Cross-Site Scripting, Open Redirect and Information Disclosure.
CVE-2014-4113 is a vulnerability in the Windows kernel that allows an attacker to gain SYSTEM privileges. The vulnerability exists in the way the Windows kernel handles objects in memory. An attacker can exploit this vulnerability by sending a specially crafted IOCTL request to a vulnerable driver. This will allow the attacker to gain SYSTEM privileges and execute arbitrary code in the kernel.
Multiple vulnerabilities were identified within ManageEngine Password Manager Pro, a secure vault for storing and managing shared sensitive information such as passwords, documents and digital identities of enterprises. These vulnerabilities include Stored XSS in /AddMail.ve, Privilege escalation in /EditUser.do, Business Login Bypass in /EditUser.do, Password policy bypass in /jsp/xmlhttp/AjaxResponse.jsp, Horizontal privilege escalation in /jsp/xmlhttp/AjaxResponse.jsp, Resource's user enumeration in /jsp/xmlhttp/PasswdRetriveAjaxResponse.jsp, Password Bruteforce for resources accounts in /jsp/xmlhttp/AjaxResponse.jsp, and Cross-Site Request Forgery.
A use-after-free vulnerability exists in the SVG pattern element in Microsoft Internet Explorer. An attacker can exploit this vulnerability by creating a malicious SVG file and convincing the user to open it. This will allow the attacker to execute arbitrary code on the target system.
Services By CQR