remote code vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted flm file....

Twd-industries Remote-anything1 EDB exploit available

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter....

Dew-code Dew-newphplinks1 EDB exploit available

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email....

Code-crafters Ability Mail Server1 EDB exploit available

5

CVSSv2

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command....

Code-crafters Ability Server2 EDB exploits available1 Metasploit module available1 Github repository available

7.5

CVSSv2

Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long APPE command....

Code-crafters Ability Server1 EDB exploit available1 Github repository available

7.8

CVSSv2

The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service....

Code-crafters Ability Mail Server

5

CVSSv2

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php....

Code-garage Com Noticeboard1 EDB exploit available

5

CVSSv2

Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter....

Dew-code Dew-newphplinks1 EDB exploit available

5

CVSSv2

Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command....

Code-crafters Ability Mail Server

4.3

CVSSv2

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....

Code-atlantic Popup Maker

1 2 3 4 5 6 NEXT »