Directory traversal

Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. dot dot in the lang parameter to index.php...

CVE-2009-1319

CVE-2009-1319 is a directory traversal vulnerability in GuestCal 2.1. The issue arises in the file includes/ini.inc.php and allows remote attackers to cause arbitrary file inclusion/execution by supplying a .. (dot dot) in the lang parameter to index.php. Affected component: includes/ini.inc.php ...

CVE-2009-1319

Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. dot dot in the lang parameter to index.php...

Apache Geronimo Cross Site Request Forgery

Original Advisory: http://dsecrg.com/pages/vul/show.php?id=120 Digital Security Research Group DSecRG Advisory DSECRG-09-020 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Multiple XSRF Vulnerabilities Exploits: YES...

Apache Geronimo Cross Site Scripting

Original advisory http://dsecrg.com/pages/vul/show.php?id=119 Digital Security Research Group DSecRG Advisory DSECRG-09-019 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Multiple XSS Vulnerabilities Exploits: YES...

GuestCal 2.1 (index.php lang) Local File Inclusion Vulnerability

No description provided by source. + GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC :...

GuestCal 2.1 (index.php lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ GuestCal 2.1 index.php lang Local File Inclusion Vulnerability ================================================================ + GuestCal 2.1 index.php lang Local File...

GuestCal 2.1 Local File Inclusion

GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC : http://127.0.0.1/index.php?year=2009&object=1&lang=../../../../../BOOTSECT.BAK%00...

GuestCal 2.1 - 'index.php?lang' Local File Inclusion

GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC : http://127.0.0.1/index.php?year=2009&object=1&lang=../../../../../BOOTSECT.BAK%00...

GuestCal 2.1 - index.php?lang Local File Inclusion

GuestCal 2.1 - index.php?lang Local File Inclusion + GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC :...

Linux Kernel 'exit_notify()' CAP_KILL校验本地特权提升漏洞

BUGTRAQ ID: 34405 CNCAN ID：CNCAN-2009040803 Linux是一款开放源代码的操作系统。 Linux exitnotify中CAPKILL检查存在问题，本地攻击者可以利用漏洞提升特权。 无论怎样重置-exitsignal，恶意用户可以绕过检查，使得恶意应用程序可以在退出前执行setuid两进制程序。导致特权提升。 Linux kernel 2.6.29 -git8 Linux kernel 2.6.29 -git1 Linux kernel 2.6.29 Linux kernel 2.6.28 9 Linux kernel 2.6.28 8 Linu...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

Code injection

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1254

Tunapie (GUI frontend for video/radio streams) is affected by CVE-2009-1254 due to insufficient escaping of stream URLs, enabling remote command execution via a crafted URL. The issue is part of a set also including CVE-2009-1253 (symlink-based local DoS); Debian DSAs document fixes. Remediation ...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

Tunapie is affected by CVE-2009-1253, a local vulnerability caused by insecure handling of temporary files that allows a local user to overwrite arbitrary files via a symlink attack. Debian's DSA-1764-1 notes fixes in tunapie 2.1.8-2 for the lenny release (and earlier 1.3.1-1+etch2 for etch), add...

RHEL 2.1 / 3 : krb5 (RHSA-2009:0410)

Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authentica...