remote code vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter....

Dew-code Dew-newphplinks 2.01 EDB exploit available

5

CVSSv2

Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections....

Code Ocean Ocean Ftp Server 1.01 EDB exploit available

9.3

CVSSv2

Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors....

Taltech Tal Bar Code Activex Control

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email....

Code-crafters Ability Mail Server 3.1.11 EDB exploit available

5

CVSSv2

The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of service (disk consumption) by uploading multiple bar codes, as demonstrated by a WSF package....

Taltech Tal Bar Code Activex Control1 EDB exploit available

5

CVSSv2

Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter....

Dew-code Dew-newphplinks 2.01 EDB exploit available

7.5

CVSSv2

Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendly_path parameter to (1) core/data/yaml.inc.php, or _load.php in (2) core/data/, (3) core/display/, or (4) core/support/....

Practical Creative And Code Friendly1 EDB exploit available

7.5

CVSSv2

Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17....

Blaauwproducts Remote Kiln Control Blaauwproducts Remote Kiln Control 3.0.01 Github repository available

6.5

CVSSv2

Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability....

Jenkins Source Code Management Filter Jervis

10

CVSSv2

Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623....

Asus Remote Console 2.0.0.19 Asus Remote Console 2.0.0.242 EDB exploits available1 Metasploit module available

« PREV 1 2 3 4 5 6 7 8 NEXT »