WordPress Plugin Zingiri 2.2.3 - ajax_save_name.php Remote Code Execution

WordPress Plugin Zingiri 2.2.3 - ajaxsavename.php Remote Code Execution get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45...

Novell Netware FTP server buffer overflow

rmdir/mkdir/dele commands buffer overflow...

CVE-2010-3867: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the modsitemisc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a 1 SITE MKDIR, 2 SITE RMDIR, 3 SITE SYMLINK...

PT-2010-5128

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.3c Description The issue allows remote authenticated users to perform unauthorized actions such as creating directories, deleting directories, creating symlinks, and modifying file timestamps. This is achieved...

TurboFTP FTP Server directory traversal

Directory traversal via mkdir and move command...

CVE-2010-0105

The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service filesystem corruption via a crafted application that calls the mkdir a...

linux/x86 break chroot 87 bytes

Exploit for linux/x86 platform in category shellcode =============================== linux/x86 break chroot 87 bytes =============================== bt:/ ./pwn perl -e 'print "\x90"x181...

Linux/x86 - mkdir(hacked) + exit() Shellcode (36 bytes)

Linux/x86 - mkdirhacked + exit Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform The comment in that file is not correct.. I cut and pasted the shell code in an existing c source and forgot to adjust it.. / This shellcode will do a mkdir of 'hacked' and then an exit Written by...

HP-UX Security Patch : PHCO_35929

mkdir1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26329; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX mkdir工具本地非授权访问漏洞

HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX的mkdir工具实现上存在漏洞，本地用户可以利用此漏洞在系统中获得非授权访问。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02128）以及相应补丁: HPSBUX02128：SSRT5996 - rev.1 HP-UX mkdir1 Local Unauthorized Access...

UNIX 7th Edition /bin/mkdir Local Buffer Overflow Exploit

No description provided by source. / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow when checking if the directory in /arg/with/slashes/fname exists. This will run /bin/sh with euid 0, but not uid 0. Since the shell doesn't do anything special about this, we don't really care...

CVE-2006-5178

Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the openbasedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the openbasedir check and before the file is opened by the underlying system, as...

CVE-2006-5178: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the openbasedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the openbasedir check and before the file is opened by the underlying system, as...

FreeBSD : php -- open_basedir Race Condition Vulnerability (edabe438-542f-11db-a5ae-00508d6a62df)

Stefan Esser reports : PHP's openbasedir feature is meant to disallow scripts to access files outside a set of configured base directories. The checks for this are placed within PHP functions dealing with files before the actual open call is performed. Obviously there is a little span of time...

CVE-2006-5010: Undefined Security Weakness

Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program...

HP-UX PHCO_32036 : HPSBUX02128 SSRT5996 - rev.1 HP-UX mkdir(1) Local Unauthorized Access

s700800 11.11 mkdir1 cumulative patch : A potential security vulnerability has been identified with HP-UX. The vulnerability could be exploited by a local user to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin we...

CVE-2006-3335

Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors...

CVE-2006-3335: Undefined Security Weakness

Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors...

Multiple HP-UX utilities security vulnerabilities

'mkdir' privilege escalation, 'passwd' DoS...

SunFTP directory traversal

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a...