CVE-2009-4830

CVE-2009-4830 affects OpenX 2.8.1 and 2.8.2 with an authentication bypass vulnerability in the OpenX administrative interface. Multiple sources describe an ability for remote attackers to bypass login and gain Administrator access via unknown vectors, with potential relation to admin-related file...

CVE-2009-4828

Cross-site request forgery CSRF vulnerability in administration/admins.php in Ad Manager Pro aka AdManagerPro 3.0 allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an admincreated action. NOTE: some of these details are...

CVE-2009-4811

CVE-2009-4811 describes a remote denial-of-service in VMware Authorization Service (vmware-authd) via a crafted sequence in USER and PASS that crashes the process. Affected products include VMware Workstation 7.0 (before 7.0.1 build 227600), VMware Workstation 6.5.x (before 6.5.4 build 246459), V...

CVE-2009-4826

CSRF vulnerability CVE-2009-4826 affects ScriptsEz Mini Hosting Panel, specifically hosting/admin_ac.php. The issue allows an attacker to hijack administrator authentication and perform requests that alter admin settings via a cp action. Impact described as unauthorized admin actions with potenti...

CVE-2009-4816

CVE-2009-4816 describes a directory traversal vulnerability in MegaLab The Uploader 2.0, exploitable through the filename parameter in api/download_checker.php where “..” can be used to read arbitrary files. Affected: MegaLab The Uploader 2.0 (component: api/download_checker.php). Root cause: imp...

CVE-2009-4813

CVE-2009-4813 describes a cross-site scripting (XSS) vulnerability in MyBB (MyBulletinBoard) version 1.4.10, specifically in the script file myps.php. The issue arises when processing the donate action where the username parameter is not properly sanitized, allowing a remote attacker to inject ar...

CVE-2009-4817

CVE-2009-4817 : Affected product is Element-IT Ultimate Uploader 1.3. The issue is an unrestricted file upload vulnerability that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to the file in the upload...

CVE-2009-4815

CVE-2009-4815 concerns the Serv-U File Server. Multiple connected sources confirm an information-disclosure vulnerability in Serv-U prior to version 9.2.0.1, enabling an authenticated user to read files outside the user’s root directory (directory traversal). The issue is documented as affecting ...

CVE-2009-4824

CVE-2009-4824 affects Kolab Webclient <= 1.1.x (before 1.2.0) and Kolab Server

CVE-2009-4823

CVE-2009-4823 is an XSS vulnerability in the cPanel frontend (frontend/x3/files/fileop.html) present in versions 11.0 through 11.24.7. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the fileop parameter. The connected documents confirm the affected produc...

CVE-2009-4821

CVE-2009-4821 affects the D-Link DIR-615 router (firmware 3.10NA). The vulnerability is that apply.cgi does not require administrative authentication, allowing remote attackers to (1) change the admin password via the admin_password parameter, (2) disable the Wi‑Fi security requirement via unspec...

CVE-2009-4820

Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, enabling remote attackers to download the veribaze/angelo.mdb database via a direct HTTP request. The root cause is improper access control; documentation confirms exposure but provides no further e...

CVE-2009-4828

CVE-2009-4828 describes a Cross-Site Request Forgery in Ad Manager Pro (AdManagerPro) 3.0, specifically in administration/admins.php, where an attacker can hijack the authentication of administrators to perform actions that create new administrative users via the admin_created action. The NVD ent...

openSUSE Security Update : glib2 (openSUSE-SU-2010:0156-1)

The when copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This update also fixes a problem where glib2 couldn't access...

CVE-2009-3523

creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12406...

IDEAL Migration 2009 4.5.1 - Local Buffer Overflow

IDEAL Migration 2009 4.5.1 - Local Buffer Overflow !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp...

[security bulletin] HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02029444 Version: 1 HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Cross Site Scripting XSS, Denial of Service DoS, Execution of Arbitrary Code,...

CVE-2009-4810

The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...

CVE-2009-4809

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing EFS Web Server 4.8 allows remote attackers to read arbitrary files via a .. dot dot in the vfolder parameter...

CVE-2009-4804

Cross-site scripting XSS vulnerability in the Calendar Base cal extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."...