CVE-2010-2037

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2037

CVE-2010-2037 is a directory traversal vulnerability in the Joomla! component Percha Downloads Attach (com_perchadownloadsattach) version 1.1. An attacker can read arbitrary files by providing a ‘..’ in the controller parameter to index.php, enabling potential exposure of sensitive information an...

Joomla! Component Percha Image Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla Percha Image Attach 1.1 Local File Inclusion

======================================================================================================================= o Joomla Component Percha Image Attach Local File Inclusion Vulnerability Software : comperchaimageattach version 1.1 Vendor : http://www.percha.com/ Author : AntiSecurity NoGe...

Joomla Percha Downloads Attach 1.1 Local File Inclusion

=========================================================================================================================== o Joomla Component Percha Downloads Attach Local File Inclusion Vulnerability Software : comperchadownloadsattach version 1.1 Vendor : http://www.percha.com/ Author :...

Joomla! Component Percha Fields Attach 1.0 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Fields Attach 1.0 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. A...

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input...

Joomla! Component Percha Image Attach 1.1 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Image Attach 1.1 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An...

Joomla! Component Percha Downloads Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Fields Attach 1.0 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

kernel: ia64: ptrace: peek_or_poke requests miss ptrace_check_attach()

A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux RHEL 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptracecheckattach call...

Firebird Relational Database SVC_attach() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firebird...

Borland InterBase SVC_attach() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Borland...

Borland InterBase open_marker_file() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Borland...

Borland InterBase INET_connect() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Borland...

Microsoft Windows Server - Code Execution (PoC) (MS08-067)

Microsoft Windows Server - Code Execution PoC MS08-067 In vstudio command prompt: mk.bat next: attach debugger to services.exe 2k or the relevant svchost xp/2k3/... net use \IPADDRESS\IPC$ /user:user creds die \IPADDRESS \pipe\srvsvc In some cases, /user:"" "", will suffice i.e., anonymous...

IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 (Windows)

The host is running DB2 Database Server, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb28udbmultvulnwin900215.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 Windows Authors: Veerendra GG...

IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 (Linux)

The host is running DB2 Database Server, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb28udbmultvulnlin900216.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 Linux Authors: Veerendra GG...

IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iCal ATTACH参数拒绝服务漏洞

BUGTRAQ ID: 28633 CVECAN ID: CVE-2008-2007 iCal是Mac OS X操作系统中所捆绑的个人日历程序。 iCal在处理畸形格式的ICS文件时存在漏洞，可能导致应用程序处理时崩溃。 如果用户受骗打开的.ics文件包含有以下行的话： /----------- ATTACH;VALUE=URI:S=osumi - -----------/ iCal在导入.ics文件后试图使用ATTACH值时会出现错误的资源释放，导致应用程序崩溃。 Apple iCal 3.0.1 Apple -----...