1147 matches found
Novell ZENworks Handheld Management Common.dll messageID Request Field Parsing Traversal Arbitrary File Creation
The version of the 'Common.dll' library included with the ZENworks Handheld Management install on the remote Windows host is affected by a directory traversal vulnerability because it fails to sanitize user input to the 'messageID' field in requests of directory traversal sequences. An...
Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)
$Id: safarixsltoutput.rb 13987 2011-10-18 07:39:50Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CentOS Update for xmlsec1 CESA-2011:0486 centos5 i386
Check for the Version of xmlsec1 OpenVAS Vulnerability Test CentOS Update for xmlsec1 CESA-2011:0486 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
HP Intelligent Management Center TFTP Multiple Vulnerabilities
A TFTP server belonging to HP Intelligent Management Center is running on the remote host. This is a collection point for any HP Intelligent Management Center clients on the network. The installed version of this server contains a number of vulnerabilities, including code execution and arbitrary...
HP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities
According to its version number, the HP Intelligent Management Center install on the remote host is potentially affected by multiple vulnerabilities : - A stack-based buffer overflow vulnerability exists in the 'img.exe' component. CVE-2011-1848 - A flaw exists in the 'tftpserver.exe' component...
HP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities
Binary data 5927.prm...
ZDI-11-161: HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability
ZDI-11-161: HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-161 May 10, 2011 -- CVE ID: CVE-2011-1849 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...
xmlsec1: arbitrary file creation when verifying signatures
xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...
Easy File Sharing Web Server 5.8 Multiple Vulnerabilities
Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...
Easy File Sharing Web Server 5.8 Directory Traversal
------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Directory Traversal / Arbitrary File Creation Threat Level............Very Critical 5/5...
Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities
Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...
Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities
------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.sharing-file.com/ Disclosure...
Medium severity flaw in QNX Neutrino RTOS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20110310 Date: 10th March 2011 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: QNX Neutrino RTOS 6.5.0...
Immunity Canvas: MS10_061
Name| ms10061 ---|--- CVE| CVE-2010-2729 Exploit Pack| CANVAS Description| Microsoft Windows Print Spooler Arbitrary File Creation Notes| CVE Name: CVE-2010-2729 VENDOR: Microsoft MSADV: MS10-061 Repeatability: Note: Please refer to the Microsoft URLs to know exactly the conditions for when this...
Mandriva Update for tomcat5 MDVSA-2010:176 (tomcat5)
Check for the Version of tomcat5 OpenVAS Vulnerability Test Mandriva Update for tomcat5 MDVSA-2010:176 tomcat5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]
The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...
tomcat: unexpected file deletion and/or alteration
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...
Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation
Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue...
Interspire Knowledge Manager 5 - 'callback.snipshot.php' Arbitrary File Creation
source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue to create arbitrary files, which may then be executed to perform unauthorized...
