CVE-2014-125000 to CVE-2014-125999

17 CVEs with public proof-of-concept exploits.

• CVE-2014-1250011 PoCCardo Systems Scala Rider Q3 Cardo-Updater api privileges management
• CVE-2014-1251134 PoCsDell/Quest KACE K1000 Unauthenticated File Upload RCE
• CVE-2014-1251144 PoCsi-Ftp 2.20 Schedule.xml Stack-Based Buffer Overflow
• CVE-2014-1251153 PoCsPandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE
• CVE-2014-1251165 PoCsHybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection
• CVE-2014-1251174 PoCsD-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
• CVE-2014-1251183 PoCseScan 5.5-2 Web Management Console Command Injection
• CVE-2014-1251193 PoCsWinRAR < 5.00 Filename Spoofing RCE
• CVE-2014-1251214 PoCsArray Networks vAPV and vxAG Default Credential Privilege Escalation
• CVE-2014-1251224 PoCsLinksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset
• CVE-2014-1251233 PoCsKloxo < 6.1.12 Unauthenticated SQL Injection RCE
• CVE-2014-1251243 PoCsPandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection
• CVE-2014-1251253 PoCsA10 Networks AX Loadbalancer Path Traversal
• CVE-2014-1251263 PoCsSimple E-Document Arbitrary File Upload RCE
• CVE-2014-1251271 PoCDenial of Service (DoS) vulnerability in mikecao/flight
• CVE-2014-1251281 PoC'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function 'naughtyHref' doesn't properly validate…
• CVE-2014-1251301 PoCCodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.php