18432 matches found
CVE-2007-5686
CVE-2007-5686 affects initscripts on rPath Linux 1. It sets insecure permissions on /var/log/btmp, allowing local users to read sensitive information about authentication attempts. The advisory notes that sshd logging of failed remote authentication attempts may also be affected because SSHD dete...
Unfixed XSS vulnerability at www.fsysa.org
Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.fsysa.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...
Trend Micro病毒扫描引擎Tmxpflt.sys多个本地安全漏洞
BUGTRAQ ID: 26209 CVECAN ID: CVE-2007-4277 Trend Micro病毒扫描引擎为桌面、服务器和网关提供杀毒功能。 Trend Micro病毒扫描引擎的驱动实现上存在多个安全漏洞，本地攻击者可能利用此漏洞提升权限。 Trend Micro的杀毒引擎中所捆绑的Tmxpflt.sys驱动中没有对\.\Tmfilter DOS设备接口设置安全的权限，允许Everyone写访问，因此任何本地登录的用户都可以访问仅有特权用户才可以访问的功能。 此外这个DOS设备接口的IOCTL...
Oracle 10g/11g SYS.LT.FINDRICSET Local SQL Injection Exploit
No description provided by source. !/usr/bin/perl http://rawlab.mindcreations.com/codes/exp/oracle/sys-lt-findricset.pl Oracle SYS.LT.FINDRICSET exploit 11g/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.5.0" Fixed with CPU...
Oracle 10g/11g SYS.LT.FINDRICSET Local SQL Injection Exploit (2)
No description provided by source. !/usr/bin/perl http://rawlab.mindcreations.com/codes/exp/oracle/sys-lt-findricsetV2.pl Oracle SYS.LT.FINDRICSET exploit 11g/10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privilege needed! - See: http://www.databasesecurity.com/ Curso...
Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)
Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...
CVE-2007-5682
Incomplete blacklist vulnerability in tiki-graphformula.php in TikiWiki before 1.9.8.2 allows remote attackers to execute arbitrary code by using variable functions and variable variables to write variables whose names match the whitelist, a different vulnerability than CVE-2007-5423...
CVE-2007-5683
CVE-2007-5683 affects TikiWiki up to version 1.9.8.1 with multiple XSS vectors. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter on tiki-remind_password.php, (2) IMG tags within wiki pages, and (3) the local_php parameter on tiki-db.php. These...
CVE-2007-5682
Incomplete blacklist vulnerability in tiki-graphformula.php in TikiWiki before 1.9.8.2 allows remote attackers to execute arbitrary code by using variable functions and variable variables to write variables whose names match the whitelist, a different vulnerability than CVE-2007-5423...
CVE-2007-5682
CVE-2007-5682 is an incomplete blacklist vulnerability in tiki-graph_formula.php of TikiWiki up to versions before 1.9.8.2, enabling a remote attacker to execute arbitrary PHP code by abusing variable functions/variables to write names matching the whitelist. This is a separate issue from CVE-200...
CVE-2007-5684
CVE-2007-5684 affects TikiWiki versions up to 1.9.8.1 (and earlier) with directory traversal/local file inclusion vulnerabilities. The issues arise in parameters error_handler_file, local_php (tiki-index.php) and imp_language (tiki-imexport_languages.php), allowing remote inclusion and potential ...
Unfixed XSS vulnerability at www.latpro.com
Security researcher unkn0wn @ toxcrew.com, has submitted on 26/10/2007 a cross-site-scripting XSS vulnerability affecting www.latpro.com, which at the time of submission ranked 40495 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/10/2007. I...
iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability
Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability iDefense Security Advisory 10.25.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 25, 2007 I. BACKGROUND The Trend Micro AntiVirus scan engine provides AntiVirus capabilities to desktop, server, and gateway system...
Unfixed XSS vulnerability at www.accessup.org
Security researcher kusomiso.com, has submitted on 26/10/2007 a cross-site-scripting XSS vulnerability affecting www.accessup.org, which at the time of submission ranked 21734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/10/2007. It is...
Unfixed XSS vulnerability at archive.stsci.edu
Security researcher unkn0wn @ toxcrew.com, has submitted on 26/10/2007 a cross-site-scripting XSS vulnerability affecting archive.stsci.edu, which at the time of submission ranked 49019 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007...
Unfixed XSS vulnerability at www.moviemistakes.com
Security researcher unkn0wn @ toxcrew.com, has submitted on 26/10/2007 a cross-site-scripting XSS vulnerability affecting www.moviemistakes.com, which at the time of submission ranked 34115 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Tivoli Storage Manager CAD Host header buffer overflow
Added: 10/26/2007 CVE: CVE-2007-4880 BID: 25743 OSVDB: 38161 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on port 1581/TCP. Problem A buffer overflow vulnerability in Tivoli Storage...
Trend Micro Scan Engine Tmxpflt.sys Buffer Overflow
The version of Trend Micro AntiVirus installed on the remote Windows host contains a buffer overflow in its 'Tmxpflt.sys' kernel driver. A local attacker may be able to leverage this issue to execute arbitrary code on the affected system in kernel context. C Tenable Network Security, Inc...
CVE-2007-2983
CVE-2007-2983 affects the British Telecommunications Consumer webhelper ActiveX control (btwebcontrol.dll) prior to version 2.0.0.8. Multiple buffer overflows enable remote code execution via unspecified vectors. The vulnerability resides in the ActiveX control used by BT’s web helper. Exploitati...
