CVE-2014-2729

This CVE targets Ektron CMS 8.7 (before 8.7.0.055). A stored XSS flaw exists in the content.aspx page where the category0 parameter is not properly sanitized when displaying the Subjects tab in the View Properties menu. It affects authenticated remote users who can inject arbitrary script/HTML vi...

Code injection

Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.4 before 8.47.5, 8.7 before 8.71.11, 9.0 before 9.03.10, and 9.1 before 9.13.4 allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496...

CVE-2013-2997

CVE-2013-2997 affects IBM Security AppScan Enterprise prior to version 8.7. The issue: upon logout, the session context is not invalidated, enabling session hijacking from an unattended workstation. IBM published advisory 1640352 with a patch/mitigation; upgrading to a fixed version (8.7 or later...

phpwind 8.7 background to get shell-vulnerability warning-the black bar safety net

phpwind 8.7 background to get the shell The first point to open the background map and then attachment settings to add a ashx suffix 2 0 0 0 size 群 里面 我 以前 扔 的 那个 ashx.txt download back into the fuck. ashx Published article there's an attachment upload the ashx throw up the premise is iis Apache ...

CVE-2012-5938

The issue (CVE-2012-5938) affects IBM InfoSphere Information Server versions 8.1, 8.5, 8.7 and 9.1 on UNIX/Linux. During installation, files are created with insufficient permissions/ownership, allowing local users to bypass access restrictions via standard filesystem operations. The IBM Security...

PHPWIND 8.7 手机版 CSRF

简要描述： 手机版的CSRF漏洞，由于手机版和电脑版共用cookie，所以对电脑版也有效 详细说明： 手机版“退出”链接为 index.php?a=quit 帖子内容写： imghttp://xxxxxxx/m/index.php?a=quit/img 看帖后即被退出 漏洞证明： 本地测试成功退出...

PHPWind8.7后台登陆安全问题鸡肋

简要描述： 8.7的版本设置了的安全登陆问题任意输入字符均可以进入后台，安全问题形同虚设。 详细说明： 8.7的版本设置了的安全登陆问题任意输入字符均可以进入后台，安全问题形同虚设。 直接绕过登陆后台管理。 漏洞证明：...

phpwind 8.7 querybuilder.class.php sql注入

No description provided by source...

CVE-2011-1537

CVE-2011-1537 is a cross-site scripting (XSS) vulnerability in HP Proliant Support Pack (PSP) that affects PSP 8.6 and earlier. An attacker could inject arbitrary script via unspecified vectors in the HP System/PSP web interfaces. HP’s security bulletin confirms the hotfix: PSP 8.7 resolves the v...

CVE-2009-3068

Unrestricted file upload vulnerability in the RoboHelpServer Servlet robohelp/server in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive .jsp file during a PUBLISH action, then accessing it via a direct request to the file in the...

Stack overflow

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

CVE-2008-5177

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

PT-2008-6321 · Yosemite · Libytlindtb.So +2

Name of the Vulnerable Software and Affected Versions: Yosemite Backup version 8.7 Description: A stack-based buffer overflow issue exists in the DtbClsLogin function, allowing remote attackers to execute arbitrary code or cause a denial of service. This issue is related to the libytlindtb.so...

CVE-2008-1643

CVE-2008-1643 describes a directory traversal vulnerability in LANDesk Management Suite (LDMS)’s PXE TFTP Service (PXEMTFTP.exe). Affected versions are LDMS 8.7 SP5 and earlier and 8.8. The flaw allows remote attackers to read arbitrary files via unspecified vectors in the PXE TFTP service. The a...

TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability

TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-07-04.html April 13, 2007 -- CVE ID: CVE-2007-1674 -- Affected Vendor: LANDesk -- Affected Products: Management Suite 8.7 -- TippingPointTM IPS Customer Protection:...

LANDesk Management Suite 8.7 Alert Service - 'AOLSRVR.exe' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/23483/info LANDesk Management Suite is prone to a remote stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue t...

Novell eDirectory iMonitor HTTPSTK Buffer Overflow Vulnerability

Novell网服务器的edirectoryimonitor容易一叠为本缓冲溢出脆弱性,因为它并没有足够的表演式检查客户提供的数据复制到前缓冲.攻杠杆这个问题有可能执行任意代码与行政特权.成功利用可能导致受影响系统的完全妥协. Novell网是FTF的一揽子解决这个问题.请参阅参考资料,以获取关于如何运用这些规定. Novell eDirectory 8.8.1 Novell eDirectory 8.7.3 .8 pre-SP9 Novell eDirectory 8.7.3 .8 Novell eDirectory 8.7.3 Novell eDirectory 8.7.1 SU1...

Sendmail 8.7.x, 8.8.x - 8.8.2 Local Overflow Vulnerability

The remote sendmail server, according to its version number, allows local user to start it in daemon mode and gain root privileges. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sendmail 8.6.x, 8.7.x - 8.7.5 Local Starvation and Overflow Vulnerabilities

The remote Sendmail server, according to its version number, has buffer overflow and denial of service problem through GECOS field, it gives root access to local users. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright...