CVE-2014-3806: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrary files via a .. dot dot in the xmlpath parameter...

PT-2014-5514

Name of the Vulnerable Software and Affected Versions VMTurbo Operations Manager versions prior to 4.6 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the xml path parameter of the cgi-bin/help/doIt.cgi...

CVE-2014-2046: Undefined Security Weakness

cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers to 1 obtain credentials and other sensitive information via a certain request to the config.getValuesHashExcludePaths method or 2 modify the firmware via...

PT-2014-4449

Name of the Vulnerable Software and Affected Versions Broadcom Ltd PIPA C211 rev2 version 1.1 Description The issue is related to the cgi-bin/rpcBridge in the web interface, which does not properly restrict access. This allows remote attackers to obtain credentials and other sensitive information...

Linux/x86 - setreuid() + execve(/usr/bin/python) Shellcode (54 bytes)

Linux/x86 - setreuid + execve/usr/bin/python Shellcode 54 bytes. Shellcode exploit for Linuxx86 platform Title: Shellcode Linux x86 54Bytes Run /usr/bin/python | setreuid,execve Date: 8/5/2014 Author: Ali Razmjoo Tested on: kali-linux-1.0.4-i386 3.7-trunk-686-pae 1 SMP Debian 3.7.2-0+kali8 i686...

PT-2016-6663

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.15 phpMyAdmin versions 4.4.x through 4.4.15.6 phpMyAdmin versions 4.6.x through 4.6.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via several vectors, including ...

CVE-2013-4290

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to 1 lib/openjp3d/opjjp3dcompress.c, 2 bin/jp3d/convert.c, or 3 lib/openjp3d/event.c...

Stack overflow

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to 1 lib/openjp3d/opjjp3dcompress.c, 2 bin/jp3d/convert.c, or 3 lib/openjp3d/event.c...

CVE-2013-4290: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to 1 lib/openjp3d/opjjp3dcompress.c, 2 bin/jp3d/convert.c, or 3 lib/openjp3d/event.c...

PT-2014-1906

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 1.5.2 Description The issue concerns multiple vulnerabilities in the OpenJPEG package, which can be exploited remotely. This exploitation may lead to a breach of confidentiality, integrity, and availability of...

Liferay Portal 6.2.0 CE GA1 Multiple XSS

According to its self-reported version number, the version of Liferay Portal running on the remote host is 6.2.0. It is, therefore, potentially affected by the following cross-site scripting vulnerabilities : - Input passed from page titles is not sanitized before it is displayed in the Recycle...

QNX 6.5.0 x86 io-graphics - Local root Exploit

Exploit for QNX platform in category local exploits / QNX 6.5.0 x86 io-graphics local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/io-graphics on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the PHOTON2HOME...

QNX 6.5.0 x86 io-graphics - Local Privilege Escalation

QNX 6.5.0 x86 io-graphics - Local Privilege Escalation / QNX 6.5.0 x86 io-graphics local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/io-graphics on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the...

QNX 6.5.0 x86 io-graphics - Local Privilege Escalation

/ QNX 6.5.0 x86 io-graphics local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/io-graphics on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the PHOTON2HOME environment variable. - vulnerable platforms: QNX...

PT-2014-2888

Name of the Vulnerable Software and Affected Versions AVTECH AVN801 DVR versions 1017-1003-1009-1003 and earlier Description A buffer overflow issue exists in the cgi-bin/user/Config.cgi component, allowing remote attackers to potentially cause a denial of service device crash and possibly execut...

DEBIAN-CVE-2014-2096

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...

UBUNTU-CVE-2014-2096

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory...

CVE-2014-2095

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory...

CVE-2014-2096

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...