wood vulnerabilities and exploits

(subscribe to this query)

Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "Sapling Wood-Chipper" attack.

Z.cash Zcash 2.0.5 Z.cash Zcash

1 Github repository

TYPSoft FTP 0.95 allows remote malicious users to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.

Typsoft Typsoft Ftp Server 0.95

1 EDB exploit

SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote malicious users to execute arbitrary SQL commands via the password.

Cool Cafe Chat Cool Cafe Chat 1.2.1

1 EDB exploit

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.

Positive Software H-sphere Winbox 2.4.2 Patch 4 Positive Software H-sphere Winbox 2.4.3 Rc1

1 EDB exploit

Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote malicious users to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

Microsoft Exchange Server 2003

1 EDB exploit

The HipChat for JIRA plugin prior to 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."

Atlassian Hipchat

2 EDB exploits

The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library/Caches/com.crashlytics.data/com.starbucks.mystarbucks/session.clslog), which allows malicious users to discover usernames, passwords, and e-mail addresses via a...

Starbucks Starbucks 2.6.1

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows malicious users to obtain sensitive information by reading data elements, as demonstrated by password elements.

Zippyyum Subway Ordering For California 3.4

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook