143 matches found
OrbiTeam BSCW 5.0.7 Metadata Information Disclosure
Advisory: Metadata Information Disclosure in OrbiTeam BSCW RedTeam Pentesting discovered an information disclosure vulnerability in OrbiTeam's BSCW collaboration software. An unauthenticated attacker can disclose metadata about internal objects which are stored in BSCW. Details ======= Product:...
RealVNC < 5.0.7 Multiple Local Privilege Escalations
The version of RealVNC on the remote host is earlier than 5.0.7. As such, it is affected by multiple privilege escalation vulnerabilities : - A local privilege escalation vulnerability exists that is triggered by a specially crafted argument to the vncserver-x11 binary on UNIX / Linux...
CVE-2013-6114
Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service application crash via a 1 large or 2 small value in the subview attribute of a viewer element in a .motn file...
Integer overflow
Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service application crash via a 1 large or 2 small value in the subview attribute of a viewer element in a .motn file...
Apple Motion 5.0.7 - Integer Overflow
Apple Motion Integer Overflow Vulnerability =========================================== Vendor: Apple http://www.apple.com Software: Motion 5.0.7 Testcase verified on: OS X 10.8 Credit: Jean Pascal Pereira DESCRIPTION =========== An integer overflow vulnerability has been identified in Apple...
CubeCart 5.0.7 Insecure Backup Handling
OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Insecure Backup File Handling which leads to the disclosure of the application configuration file. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that...
CubeCart 5.0.7 Open URL Redirection
OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat...
Sql injection
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI...
CVE-2008-6748
CVE-2008-6748 affects Megacubo 5.0.7. The issue is an eval injection in the application, enabling remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI. The root cause is dynamic evaluation of input (eval) exposed through the play action. The provided docu...
Megacubo 5.0.7 Remote File Download And Execute Exploit
Megacubo 5.0.7 download & Execute by :JJunior site: http://www.musicastop.com.br/ tested against Internet Explorer 7 and Mozilla Firefox 1.5 Windows Xp sp 3 software site: http://www.megacubo.net/tv/ download url:...
Megacubo 5.0.7 - mega: Arbitrary File Download and Execute
Megacubo 5.0.7 - mega: Arbitrary File Download and Execute Megacubo 5.0.7 download & Execute by :JJunior site: http://www.musicastop.com.br/ tested against Internet Explorer 7 and Mozilla Firefox 1.5 Windows Xp sp 3 software site: http://www.megacubo.net/tv/ download url:...
Megacubo 5.0.7 (mega://) Remote File Download and Execute Exploit
No description provided by source. Megacubo 5.0.7 download & Execute by :JJunior site: http://www.musicastop.com.br/ tested against Internet Explorer 7 and Mozilla Firefox 1.5 Windows Xp sp 3 software site: http://www.megacubo.net/tv/ download url:...
Megacubo 5.0.7 - 'mega://' Arbitrary File Download and Execute
Megacubo 5.0.7 download & Execute by :JJunior site: http://www.musicastop.com.br/ tested against Internet Explorer 7 and Mozilla Firefox 1.5 Windows Xp sp 3 software site: http://www.megacubo.net/tv/ download url:...
Megacubo 5.0.7 Injection Exploit
pwn...
Megacubo 5.0.7 (mega://) remote eval() injection exploit
!-- Megacubo 5.0.7 mega:// remote eval injection exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ tested against Internet Explorer 8 beta 2/xp sp 3 software site: http://www.megacubo.net/tv/ download url:...
Megacubo 5.0.7 (mega://) Remote eval() Injection Exploit
No description provided by source. !-- Megacubo 5.0.7 mega:// remote eval injection exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ tested against Internet Explorer 8 beta 2/xp sp 3 software site: http://www.megacubo.net/tv/ download url:...
Megacubo 5.0.7 - mega: Remote eval() Injection
Megacubo 5.0.7 - mega: Remote eval Injection pwn milw0rm.com 2008-12-30...
SCO Openserver 5.0.7 (termsh) Local Privilege Escalation Exploit
No description provided by source. / SCO Openserver 5.0.7 termsh exploit =================================== 'termsh' is a program to view or modify an existing terminal entry on SCO Openserver. A stack based overflow exists in the handling of command line arguements, namely the -o oadir arguemen...
Code injection
The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service application crash via LDAP messages that contain Distinguished Names DN fields with a large number of elements...