The Auto CMS application is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. An attacker can exploit this vulnerability to execute arbitrary script code in the browser of an unsuspecting user, potentially stealing authentication credentials and launching further attacks.
The BlastChat Client is prone to a cross-site scripting vulnerability due to improper input sanitization. An attacker can exploit this vulnerability to execute arbitrary script code in the browser of a victim user, potentially stealing their authentication credentials and launching further attacks.
Crystal Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
This is a proof-of-concept exploit for a memory corruption vulnerability in the ChangeServiceConfig2A() function of the MS Windows DCE-RPC svcctl service. The exploit allows an attacker to cause a denial of service (DoS) by crashing the target system. The vulnerability was discovered by Krystian Kloskowski (h07) and has been tested on Windows 2000 SP4 Polish with all patches installed.
Attackers can exploit this issue to execute arbitrary code or cause denial-of-service conditions.
The Acunetix Web Vulnerability Scanner is vulnerable to a DLL hijacking vulnerability. An attacker can exploit this vulnerability by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted DLL file. This can lead to the execution of arbitrary code.
Nagios XI is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
An attacker can exploit this issue to crash the database, denying access to legitimate users.
This PHP exploit allows an attacker to bypass the ext/filter FDF POST filter and execute remote code. It works by creating a malicious FDF file and sending it to a target URL.
This is an authenticated Stored XSS vulnerability in Arachni Web UI. A malicious user can craft a link in a comment that will execute arbitrary Javascript.
Services By CQR