Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

CVE-2009-4850

CVE-2009-4850 affects AwingSoft Winds3D Viewer plugin 3.5.0.9. The vulnerability allows remote code execution by supplying a SceneURL value that points to an executable (.exe). Public references show exploitation tooling in Metasploit (sceneurl module) and historical coverage (Exploit-DB), confir...

CVE-2009-4850

The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

This module exploits an untrusted program execution vulnerability within the Winds3D Player from AwingSoft. The Winds3D Player is a browser plugin for IE ActiveX, Opera DLL and Firefox XPI. By setting the 'SceneURL' parameter to the URL to an executable, an attacker can execute arbitrary code...

Ubuntu USN-726-1 (curl)

The remote host is missing an update to curl announced via advisory USN-726-1. OpenVAS Vulnerability Test $Id: ubuntu7261.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7261.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-726-1 curl Authors: Thomas Reinke...

Mandrake Security Advisory MDVSA-2009:022 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:022. OpenVAS Vulnerability Test $Id: mdksa2009022.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:022 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:022 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:022. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Mac OS X Multiple Vulnerabilities (Security Update 2008-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-005 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if...

PHP cURL 'safe mode'安全绕过漏洞

BUGTRAQ ID: 27413 CVE ID:CVE-2007-4850 CNCVE ID:CNCVE-20074850 PHP是一款流行的网络编程语言。 PHP cURL存在'safe mode'安全绕过问题，远程攻击者可以利用漏洞访问受限制文件，获得敏感信息。 vardumpcurlexeccurlinit"file://safemodebypass\x00&qu ot;.FILE; is caused by error in curl/interface.c - --- define PHPCURLCHECKOPENBASEDIRstr, len, ret if...

CVE-2007-4850

CVE-2007-4850 affects PHP with libcurl (curl/interface.c) in PHP 5.2.4 and 5.2.5, where a file:// request containing a NULL sequence can bypass safe_mode and open_basedir and read arbitrary files. The vulnerability is linked to PHP’s libcurl handling and is reflected in OpenVAS entries for PHP

PHP 5.2.5 cURL safe_mode bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.5 cURL safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 SecurityReason Date: - - Written: 21.08.2007 - - Public: 22.01.2008 SecurityReason Research SecurityAlert Id: 51 CVE: CVE-2007-4850 SecurityRisk: Medium Affected Software: PHP 5.2....

CVE-2005-4850

CVE-2005-4850 affects eZ Publish 3.5–3.7 before 20050608. The issue occurs because submitting data requires both edit and create permissions; this allows remote attackers to edit data submitted by arbitrary anonymous users. The available connected documents confirm the product/version scope and t...

CVE-2006-4850

BolinOS ≤ 4.5.5 is affected by a PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php that can execute arbitrary PHP code via the gBRootPath URL parameter. The root cause is improper handling of the gBRootPath parameter, enabling an attacker to include remote PHP code. Th...