GREED 0.81 GRX File List Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands in file names...

White_Dune 0.29beta791 Multiple Local Code Execution Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27102/info WhiteDune is affected by a format-string vulnerability and a buffer-overflow vulnerability. Exploiting these issues can allow local attackers to execute arbitrary code in the context of the application. Version...

TeraCopy 2.3 (default.mo) Language File Integer Overflow Vulnerability

No description provided by source. ?!J:\Perl\bin\perl.exe TeraCopy 2.3 default.mo Language File Integer Overflow Vulnerability Vendor: Code Sector Product web page: http://www.codesector.com Affected version: 2.27 and 2.3 beta 2 Summary: TeraCopy is designed to copy and move files at the maximum...

Seo Panel - file Directory Traversal

Seo Panel - file Directory Traversal source: https://www.securityfocus.com/bid/67911/info Seo Panel is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequence...

HP Universal Configuration Management Database远程代码执行漏洞

Bugtraq ID:66963 CVE ID:CVE-2013-6215 HP Universal Configuration Management Database是惠普公司的统一配置管理数据库应用。 HP Universal Configuration Management Database存在一个未明安全漏洞，允许远程攻击者利用漏洞以应用程序上下文执行任意代码。 0 HP Universal Configuration Management Database Integration Service v10.01 HP Universal Configuration...

NeoBill 0.9-alpha - 'language' Local File Inclusion

source: https://www.securityfocus.com/bid/64112/info NeoBill is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent...

Barnraiser Prairie - get_file.php Directory Traversal

Barnraiser Prairie - getfile.php Directory Traversal source: https://www.securityfocus.com/bid/60782/info Barnraiser Prairie is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with...

Barnraiser Prairie - 'get_file.php' Directory Traversal

source: https://www.securityfocus.com/bid/60782/info Barnraiser Prairie is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to access arbitrary image...

ZamFoo - date Remote Command Injection

ZamFoo - date Remote Command Injection source: https://www.securityfocus.com/bid/60826/info ZamFoo is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. ZamFoo 12.0 is vulnerable; other versions may...

ZamFoo - 'date' Remote Command Injection

source: https://www.securityfocus.com/bid/60826/info ZamFoo is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. ZamFoo 12.0 is vulnerable; other versions may also be affected...

Apache Struts - OGNL Expression Injection

source: https://www.securityfocus.com/bid/60345/info Apache Struts is prone to a remote OGNL expression injection vulnerability. Remote attackers can exploit this issue to manipulate server-side objects and execute arbitrary commands within the context of the application. Apache Struts 2.0.0...

GetResourceServlet pre-auth arbitrary file download vulnerability

The GetResourceServlet Servlet is vulnerable to an arbitrary file download attack. As the Servlet doesn’t implement its own authorization checks, this can be exploited anonymously. By taking an attacker controlled name parameter and using this in a call to URLConnection.openConnection, an attacke...

Foscam < 11.37.2.49 - Directory Traversal

source: https://www.securityfocus.com/bid/58290/info Foscam is prone to a directory-traversal vulnerability. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to retrieve arbitrary files in the context of the application. This may aid in further attacks...

EasyITSP - voicemail.php Directory Traversal

EasyITSP - voicemail.php Directory Traversal source: https://www.securityfocus.com/bid/57741/info EasyITSP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal...

EasyITSP - 'voicemail.php' Directory Traversal

source: https://www.securityfocus.com/bid/57741/info EasyITSP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to access arbitrary files in the...

Ruby On Rails XML Processor YAML Deserialization Code Execution

This Metasploit module exploits a remote code execution vulnerability in the XML request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the...

Schmid Watson Management Console - Directory Traversal

source: https://www.securityfocus.com/bid/57237/info Schmid Watson Management Console is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files within the context of the...

Novell File Reporter 'NFRAgent.exe' Multiple Security Vulnerabilities

Novell File Reporter is prone to the following security vulnerabilities: 1. A heap-based buffer-overflow vulnerability 2. Multiple arbitrary file-download vulnerabilities 3. An arbitrary file-upload vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

Cryptocat 2.0.22 - Arbitrary Script Injection

Cryptocat 2.0.22 - Arbitrary Script Injection source: https://www.securityfocus.com/bid/61093/info Cryptocat is prone to an arbitrary script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code withi...

HP SAN/iQ Virtual SAN Appliance Second Parameter Command Execution Vulnerability

HP SAN/iQ Virtual SAN Appliance is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...