P-News 1.161.17 - user.dat Remote Password Disclosure

P-News 1.161.17 - user.dat Remote Password Disclosure P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/db/user.dat As We see Admin name and...

gnutar.txt

GNU tar directory traversal ---------------------------------------------------------------------------- What is it? When i download a tar file warez.tar.gz in this example from the web and run the following commands: $ mkdir /warez $ tar xzf warez.tar.gz -C /warez , then i would expect that tar...

CVE-2006-5434

CVE-2006-5434 is a PHP remote file inclusion vulnerability in P-News versions 1.16 and 1.17. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the pn_lang parameter, enabling arbitrary code execution. The NVD entry lists a high impact (base score 7.5; Confidenti...

P-News 1.16 - Remote File Inclusion

============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r, Sascha Schmalz, ReFleCtion, BleX,...

P-News 1.16 - Administrative Account Creation

P-News 1.16 - Administrative Account Creation source: https://www.securityfocus.com/bid/7689/info A vulnerability has been reported that could enable a P-News member to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input...

PT-2002-2634 · Skystream · Skystream Emr5000

Name of the Vulnerable Software and Affected Versions: SkyStream EMR5000 versions 1.16 through 1.18 Description: The issue allows remote attackers to cause a denial of service, resulting in a null pointer exception and kernel panic, by sending a large number of packets when the buffers are full...

CVE-2002-0003

CVE-2002-0003 describes a buffer overflow in the groff preprocessor (groff 1.16 and earlier) that can allow remote attackers to gain privileges via the LPRng printing system when groff is invoked through lpd. The vulnerability affects the preprocessor and can enable privilege escalation to the lp...

CVE-2000-1192

CVE-2000-1192 affects BTT Software SNMP Trap Watcher 1.16. The vulnerability is a buffer overflow in handling a long SNMP trap string, allowing remote denial of service and possibly arbitrary command execution. Documents do not provide exploitation details or a confirmed patch/remediation. The NV...