54 matches found
CVE-2012-6253
CVE-2012-6253 entry is rejected/not used per the initial description.
CVE-2016-6253
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox...
CVE-2016-6253
CVE-2016-6253 concerns NetBSD’s mail.local local privilege escalation. A race/symlink vulnerability in mail.local (affecting NetBSD 6.0–6.0.6, 6.1–6.1.5, and 7.0) allows a local user to change ownership of or append data to arbitrary files via the user mailbox handling. Public references document...
NetBSD mail.local Privilege Escalation
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'NetBSD mail.local Privilege Escalation', 'Description' = %q This module attempts to exploit a race condition in mail.local with...
CVE-2016-6253
creationtimestamp| type| source ---|---|--- 2016-07-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40141 2016-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40385 2018-05-29 15:50:33+00:00| seen|...
CVE-2014-6253
CVE-2014-6253 affects Zenoss Core (through Zenoss Core 5 Beta 3). The vulnerability is a cross-site request forgery (CSRF) that could allow a remote attacker to hijack the authentication of arbitrary users. Root cause: CSRF in the Zenoss Core web interface. Impact, as stated in the connected reco...
SuSE 11.1 Security Update : flash-player (SAT Patch Number 6253)
Flash Player was updated to version 11.2.202.233, fixing a critical security problem. This update also fixes a problem with NVIDIA accelerated drivers and swapped blue/red colors, and also a printing regression introduced by a previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
ICCP Invalid Destination Address (SCADA)
Binary data 6253.prm...
CVE-2008-6253
Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the gpcltarlibdir parameter...
CVE-2008-6253
Pluck 4.5.3 is affected by a directory traversal vulnerability in data/inc/lib/pcltar.lib.php when register_globals is enabled. The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the g_pcltar_lib_dir parameter. No exploitation detai...
CVE-2008-6253
Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the gpcltarlibdir parameter...
CVE-2008-6253
creationtimestamp| type| source ---|---|--- 2008-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7153...
CVE-2007-6253
Adobe Form Designer 5.0 and Advanced Form Client 5.0 contain multiple ActiveX buffer-overflow vulnerabilities in the File Dialog Button (FileDlg.dll) and Copy to Server Object (SvrCopy.dll). The flaws may allow a remote, unauthenticated attacker to execute arbitrary code if a user is lured to a m...
CVE-2006-6253
CVE-2006-6253 concerns Cahier de texte 2.0, which reportedly stores sensitive information under the web root. The vulnerability description indicates insufficient access control may allow remote attackers to directly request administration/dump.sql and obtain all users’ passwords. The connected d...