CVE-2009-4726

Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2009-4726

Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CentOS 4 / 5 : tar (CESA-2010:0141)

An updated tar package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual...

VariCAD 2010-2.05 EN - Local Buffer Overflow

/ Exploit Title: VariCAD 2010-2.05 EN Local buffer overflow : Date: 15 March 2010 Author: n00b Realname: carl cope Software Link: http://www.varicad.com/en/home/ Version: All versions are affected. Tested on: Windows xp sp3,Vista sp2,Linux unbuntu CVE : if exists...

Sql injection

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...

CVE-2010-0729

A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux RHEL 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptracecheckattach call...

CVE-2010-0980

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...

CVE-2010-0980

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...

CVE-2010-0980

The CVE-2010-0980 entry concerns Left 4 Dead (L4D) Stats 1.1. The vulnerability is a SQL injection in player.php that allows remote attackers to modify or exfiltrate data via the steamid parameter. This is supported by multiple sources (NVD entry and related references) which indicate arbitrary S...

Unfixed XSS vulnerability at 4.hidemyass.com

Security researcher LordTittiS, has submitted on 03/11/2010 a cross-site-scripting XSS vulnerability affecting 4.hidemyass.com, which at the time of submission ranked 965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is current...

QuickZip 4.x Local Universal Buffer Overflow

!/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link : http://www.quickzip.org/downloads.html Version : 4.60 OS : Windows Tested on : XP SP...

QuickZip 4.x - .zip Local Universal Buffer Overflow

QuickZip 4.x - .zip Local Universal Buffer Overflow !/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link :...

CentOS Update for systemtap CESA-2010:0125 centos4 i386

Check for the Version of systemtap OpenVAS Vulnerability Test CentOS Update for systemtap CESA-2010:0125 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

FreeBSD 8.0 OpenBSD 4.x - ftpd Null Pointer Dereference Denial of Service

FreeBSD 8.0 OpenBSD 4.x - ftpd Null Pointer Dereference Denial of Service // source: https://www.securityfocus.com/bid/38559/info The FreeBSD and OpenBSD 'ftpd' service is prone to a denial-of-service vulnerability because of a NULL-pointer dereference. Successful exploits may allow remote...

CentOS 4 : systemtap (CESA-2010:0125)

Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SystemTap is an instrumentation system for systems running the Linux kernel, version 2.6...

RHEL 4 : systemtap (RHSA-2010:0125)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0125 advisory. - systemtap: Crash with systemtap script using getargv CVE-2010-0411 Note that Nessus has not tested for this issue but has instead relied only on th...

Slaed CMS 4 RFI / Shell Upload

======================================================================================== | Title : Script Slaed Cms 4 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.sec-war.com | Web Site : | Dork : Powered by SLAED CMS © 2005-2008 SLAED. All rights reserve...

SLAED CMS 4 - Installation Script Unauthorized Access

SLAED CMS 4 - Installation Script Unauthorized Access source: https://www.securityfocus.com/bid/38453/info SLAED CMS is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to obtain unauthorized access to installation scripts. SLAED CMS 4 is vulnerable; other versions...

Safari 4 Remote Crash Vulnerability

No description provided by source. Safari 4 Remote Crash Vulnerability Vulnerability: Because this is a test Safari 4.0 browser's memory handling that end, we have created a test page document, and its code is: html code dir=...