CVE-2011-0441

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/...

CVE-2011-0441

CVE-2011-0441 is a local vulnerability in PHP 5.x packages (notably the Debian/Ubuntu php5 package) where the /etc/cron.d/php5 cron job can be abused by a local user to delete arbitrary files via a symlink attack on a directory under /var/lib/php5. The Debian advisory DSA 2195-1 and Ubuntu USN-13...

CVE-2011-0022

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

Server: insecure pid file directory permissions

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

iOS SideBooks 1.0 - Directory Traversal

Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory traversal...

php: information leak vulnerability in var_export()

The varexport function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if displayerrors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution...

Mandriva Update for nss_updatedb MDVA-2010:223 (nss_updatedb)

Check for the Version of nssupdatedb OpenVAS Vulnerability Test Mandriva Update for nssupdatedb MDVA-2010:223 nssupdatedb Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Joomla Sponsor Wall Component (com_sponsorwall) SQL Injection Vulnerability

No description provided by source. ============================================================ Joomla Component comsponsorwall SQL Injection Vulnerability ============================================================ Author : Fl0riX Bug Researchers Name : Joomla comsponsorwall Bug Type : SQL...

Joomla Flipwall SQL Injection

Joomla Component flipwall SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla comflipwall Bug Type : SQL injection Dork: "comflipwall" Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : +http://0611.info/index.php?option=comflipwall&controller=flipwall&catid=EXPLOIT +...

Fedora 12 : texlive-2007-48.fc12 (2010-8242)

Changes in this update: fixes for CVE-2010-0739 and CVE-2010-1440 adds missing defattr to filelists fixes directory ownership of /var/lib/texmf/web2c uses official tarball for jpatch fixes post/postun scriptlets Note that Tenable Network Security has extracted the preceding description block...

DEBIAN-CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-1439

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

Netvidade Engine 1.0 SQL Injection

!/usr/bin/perl -w use strict; use LWP::UserAgent; use Getopt::Long; use MIME::Base64; '/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2o1o |...

Joomla Component (Yelp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Joomla Component Yelp SQL Injection Vulnerability =================================================== ...BEGIN ADVISORY...

Joomla! Component Yelp - SQL Injection

Joomla! Component Yelp - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla Yelp Component SQL Injection Vulnerability LANGUAGE: PHP RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla! Component Job - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla Job Component SQL Injection Vulnerability LANGUAGE: PHP RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla (Job Component) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== Joomla Job Component SQL Injection Vulnerability ================================================== ...BEGIN ADVISORY...

Joomla! Component JE Event Calendar - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...