The Joomla Joltcard component suffers from a remote SQL injection vulnerability.
e1e3738b1ace4ff81e08763203207dedec18b83e5992a8bc71df97b4f68c5ad8The Joomla Pandafminigames component suffers from a remote SQL injection vulnerability.
761036b8e57a6bbc47c456953ad85743b18633931edab688e6b2a88ac06a995diDefense Security Advisory 04.15.10 - Remote exploitation of an integer overflow vulnerability within AgentX++, as distributed with multiple vendors' products, allows attackers to execute arbitrary code with the privileges of the AgentX master process. This vulnerability exists within the AgentX::receive_agentx function. If an attacker sends a request specifying the maximum 32-bit integer as the payload length, adding one will cause an integer overflow, resulting in the allocation of a "0" size buffer. Since an attacker can send as much, or as little, data as they wish, they can overflow the allocated heap buffer by an arbitrary amount.
176f4add59ab7e2454b1c942cc75564e4ab4b26ebd3fe4762e5e77e44a63a6b2iDefense Security Advisory 04.15.10 - Remote exploitation of a stack-based buffer overflow vulnerability within AgentX++, as distributed with multiple vendors' products, allows attackers to execute arbitrary code with the privileges of the AgentX master process. This vulnerability exists within the AgentX::receive_agentx function. By sending multiple blocks of data to the vulnerable function, an attacker could overwrite the data following the stack buffer, including the saved return address.
499590eb81a0b27fc47fa45064c8da26ab84f710c5e3d28fa2e9796dfe3c0034WebAdmin suffers from a shell upload vulnerability.
0cca481bd9c1bd616eac9421feabff7ace6b595487250eefbd72d3b0762ee220Uploader version 0.7 suffers from a shell upload vulnerability.
94048233f0a0ef9bb972d5ec1a9db050ba9779cad6d5e71f64b2316898c12fbfZykeCMS version 1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
7831357f6e201b60351666ed00c2f6928a920f4a87575f9070ff13eb1768754360cycle CMS version 2.5.2 cross site request forgery exploit.
886f85b3fca0cc5d51cd8d9c57a6cf79617c4ec18b54a0b3980bbd921a520bd0MS10-006 SMB client-side bug proof of concept exploit.
02653212f9c67f3771d0ec91567c4eb4fc34e537ee7ab9fc8b174bcb6189b5aaArchive Searcher version 2.1 suffers from a stack overflow vulnerability.
582f4a3973fddd70c105d4382330b620193bad1eb347489344824e98e103a47c
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed