81 matches found
CVE-2011-5284
Cross-site request forgery CSRF vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to...
CVE-2011-5284
CVE-2011-5284 describes a Cross-site Request Forgery vulnerability in Smoothwall Express 3.1 and 3.0 SP3 and earlier, specifically in the web management interface’s httpd/cgi-bin/shutdown.cgi. The vulnerability allows an attacker to hijack an administrator’s authenticated session to perform reboo...
CVE-2011-5284
Cross-site request forgery CSRF vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to...
CVE-2014-5284
CVE-2014-5284 affects OSSEC prior to 2.8.1, where host-deny.sh writes to temporary files with predictable filenames without ownership verification. This can allow a local attacker to modify hosts.deny and gain root privileges by pre-creating temp files before automatic IP blocking occurs. The vul...
OSSEC 2.8 - Insecure Temporary File Creation Vulnerability Privilege Escalation Exploit
Exploit for linux platform in category local exploits !/usr/bin/python Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Date: 14-11-14 Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...
OSSEC 2.8 - hosts.deny Local Privilege Escalation
OSSEC 2.8 - hosts.deny Local Privilege Escalation !/usr/bin/python Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Date: 14-11-14 Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...
OSSEC 2.8 Privilege Escalation
!/usr/bin/python Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Date: 14-11-14 Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link: https://github.com/ossec/ossec-hids/archive/2.8.1.tar.gz Version: OSSEC - 2.8 Tested on: Ubunutu...
OSSEC 2.8 - 'hosts.deny' Local Privilege Escalation
!/usr/bin/python Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Date: 14-11-14 Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link: https://github.com/ossec/ossec-hids/archive/2.8.1.tar.gz Version: OSSEC - 2.8 Tested on: Ubunutu...
CVE-2014-5284
creationtimestamp| type| source ---|---|--- 2014-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35234...
Fedora Update for drupal6 FEDORA-2014-5284
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-5284
CVE-2010-5284 affects Collabtive 0.6.5 with multiple XSS vulnerabilities. The issues stem from unsanitized user input in three parameters: User (edit profile), y (newcal action), and pic (thumb). Impact is remote script/HTML injection in the context of the affected web app; exploit details or CVS...
Collabtive Cross Site Scripting and HTML Injection Vulnerabilities
Collabtive is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted...
CVE-2010-5284
creationtimestamp| type| source ---|---|--- 2010-10-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15240...
Fedora Core 10 FEDORA-2009-5284 (quagga)
The remote host is missing an update to quagga announced via advisory FEDORA-2009-5284. OpenVAS Vulnerability Test $Id: fcore20095284.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5284 quagga Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Fedora Core 10 FEDORA-2009-5284 (quagga)
The remote host is missing an update to quagga announced via advisory FEDORA-2009-5284. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2007-5284
The CVE-2007-5284 entry is a duplicate of CVE-2007-5279. Connected sources describe a PowerArchiver buffer overflow vulnerability in ConeXware PowerArchiver before 10.20.21. If a user opens a specially crafted BlackHole archive filename, an attacker could execute arbitrary code with the user’s pr...
CVE-2006-5284
CVE-2006-5284 describes a PHP remote file inclusion in Shen Cheng-Da PHP News Reader (aka pnews), affected versions up to 2.6.4. The vulnerability exists in the auth/phpbb.inc.php component, where an attacker can supply a URL via the CFG[auth_phpbb_path] parameter, leading to arbitrary PHP code e...
CVE-2006-5284
PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader aka pnews 2.6.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CFGauthphpbbpath parameter...