PT-2013-1289

Name of the Vulnerable Software and Affected Versions Линтер Бастион affected versions not specified Description The issue concerns the storage of user accounts in the system table "$$$USR", which contains usernames and encrypted passwords. By default, the database management system uses the...

PT-2013-4435

Name of the Vulnerable Software and Affected Versions GroundWork Monitor Enterprise version 6.7.0 Description The issue concerns the Foundation webapp admin interface in GroundWork Monitor Enterprise, where it uses the nagios account as the owner of writable files under /usr/local/groundwork. Thi...

CVE-2013-3500: Undefined Security Weakness

The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script...

PT-2013-2119

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 11.0.9 Description The issue is related to an untrusted search path vulnerability in the /usr/local/psa/admin/sbin/wrapper component. This vulnerability allows local users to gain privileges by crafting the PATH...

PT-2012-5892

Name of the Vulnerable Software and Affected Versions SAPID CMS version 1.2.3 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via a URL in the root path parameter to specific API endpoints, such as "usr/extensions/get tree.inc.php" or...

PT-2012-4225

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 0.6.22 Description The issue is related to the user change icon file authorized cb function in /usr/libexec/accounts-daemon, which does not properly check the UID when copying an icon file to the system cache...

LightDM 1.0.6 - Arbitrary File Deletion

LightDM 1.0.6 - Arbitrary File Deletion source: https://www.securityfocus.com/bid/52452/info Light Display Manager LightDM is prone to a local arbitrary-file-deletion vulnerability. A local attacker can exploit this issue to delete arbitrary files with administrator privileges. Light Display...

PT-2012-1689

Name of the Vulnerable Software and Affected Versions eEye Retina Network Security Scanner versions 2406 through 2423 Description The issue allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/. Recommendations For versions 2406...

php forge local file inclusion vulnerability-vulnerability warning-the black bar safety net

Code: ? php $page=$GETpage; include$page.'php'; ?& gt; You can use http://www.xxx.com/index.php?page=../etc/passwd http://www.xxx.com/index.php?page=../../../etc/passwd http://www.xxx.com/index.php?page=..../../etc/passwd Get more data: etc/profile etc/services the /etc/passwd /etc/shadow the...

win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes

win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes. Shellcode exploit for win32 platform Title : win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes Author : KaHPeSeSe Screenshot : http://i53.tinypic.com/289yamq.jpg Desc. : usr: kpss , pass: 12345 , localgroup: Administrator Tested on ...

win32/PerfectXp-pc1/sp3 (Tr) Add Admin Shellcode 112 bytes

Title : win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes Author : KaHPeSeSe Screenshot : http://i53.tinypic.com/289yamq.jpg Desc. : usr: kpss , pass: 12345 , localgroup: Administrator Tested on : PERFECT XP PC1 / SP3 Date : 18/07/2011 Not : a.q kpss : include include include int main...

CVE-2011-2328

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...

Buffer overflow

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...

CVE-2011-2328

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...

PT-2011-3776

Name of the Vulnerable Software and Affected Versions HP LoadRunner affected versions not specified Description The issue is related to a buffer overflow in HP LoadRunner, which can be triggered by a .usr file also known as a Virtual User script containing long directives. This can cause a denial...

CVE-2011-2328: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...

HP LoadRunner buffer overflow vulnerability

Overview HP LoadRunner contains a buffer overflow vulnerability when parsing Virtual User script files. Description According to HP's website: HP LoadRunner software is the industry standard for performance validation. It allows you to prevent application performance problems by detecting...

PT-2010-5578

Name of the Vulnerable Software and Affected Versions Hycus CMS version 1.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via several parameters, including user name and usr email to "user/1/hregister.html", usr email to "user/1/hlogin.html",...

Fedora 12 : systemtap-1.3-3.fc12 (2010-17868)

This refresh corrects two important security bugs in the /usr/bin/staprun program of the systemtap-runtime package. CVE-2010-4171 Ability to remove unused modules by unprivileged user CVE-2010-4170 Insecure loading of modules We would like to thank Tavis Ormandy for reporting this issue. Note tha...

Fedora 13 : systemtap-1.3-3.fc13 (2010-17873)

This refresh corrects two important security bugs in the /usr/bin/staprun program of the systemtap-runtime package. CVE-2010-4171 Ability to remove unused modules by unprivileged user CVE-2010-4170 Insecure loading of modules We would like to thank Tavis Ormandy for reporting this issue. Note tha...