[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2010-003 Revision: 1.0 Release Date: 2010/02/22 Last Modified: 2010/02/22 Date Reported: 2010/02/01 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4....

DotNetNuke 4.8.x <= 5.1.4 XSS Vulnerability

DotNetNuke is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-4110

Cross-site scripting XSS vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search terms that are not properly filtered before display in a custom results page...

CVE-2009-2904

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...

Ninja Blog 4.8 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Ninja Blog 4.8 Remote XSS URI Vulnerabilities Discovered By : Moudi Contact : Download : http://ninjadesigns.co.uk/ Greetings : Mizoz, Zuka,...

Sourcefire 3D Sensor Defense Center 4.8.x - Privilege Escalation

Sourcefire 3D Sensor Defense Center 4.8.x - Privilege Escalation Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability...

Easy File Sharing Web Server 4.8 File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad www.v4-team.com -- Bug -- Exploit ...

Easy File Sharing Web Server 4.8 File Disclosure Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad...

Easy File Sharing Web Server 4.8 - File Disclosure

Easy File Sharing Web Server 4.8 - File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by...

Easy File Sharing Web Server 4.8 File Disclosure Vulnerability

Exploit for unknown platform in category remote exploits ============================================================== Easy File Sharing Web Server 4.8 File Disclosure Vulnerability ============================================================== Program: Easy File Sharing Web Server Version: 4.8...

Easy File Sharing Web Server 4.8 - File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad www.v4-team.com -- Bug -- Exploit ...

CVE-2009-0325

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

Directory traversal

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

CVE-2009-0325

CVE-2009-0325 affects Ninja Blog 4.8, specifically entries/index.php. The vulnerability is a directory traversal that allows reading arbitrary files by injecting .. into the cat parameter when magic_quotes_gpc is disabled. Public references in NVD and PRION/PT-2009-2988 describe the condition and...

CVE-2009-0325

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

Ninja Blog 4.8 Information Disclosure

Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/index.php?s=ad&id=6 ---- Due to insufficient validation of client-side data, we can alter the path of files to be read to ...

Ninja Blog 4.8 XSRF / XSS

Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of client-side data, we can inject script directly into the...

Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection

Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of...

Ninja Blog 4.8 (CSRF/HTML Injection) Vulnerability

No description provided by source. Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of client-side data, we can...

Ninja Blog 4.8 Remote Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ninja Blog 4.8 Remote Information Disclosure Vulnerability ========================================================== Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May...