ComponentOne VSFlexGrid 7 & 8 - "Archive()" method Remote Buffer Overflow Exploit

No description provided by source. Tilte: ComponentOne VSFlexGrid v. 7 & 8 Archive method Remote Buffer Overflow Exploit Date....................: 19-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: ComponentOne VSFlexGrid v. 7 & 8...

Optimal Archive 1.38 - (.zip) SEH PoC 0day

No description provided by source. !/usr/bin/python Title: Optimal Archive 1.38 .zip 0day SEH PoC Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.optimalaccess.com/oadownload.php?version=oarchive.exe Platform: Windows XP sp3 En Advisory:...

ProFTPD-1.3.3c Backdoor Command Execution

No description provided by source. $Id: proftpd133cbackdoor.rb 11214 2010-12-03 12:34:38Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Winace UnAce 1.x ACE Archive Remote Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12628/info A remotely exploitable client-side directory-traversal vulnerability affects Winace unace. The application fails to properly sanitize file and directory names contained within malicious ACE format archives. An...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand...

[security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04341295 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04341295 Version: 1 HPSBMU03048 rev....

Origin: Command execution as root via downloadable cartridge source-url

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

DEBIAN-CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4039

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf...

Design/Logic Flaw

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

UBUNTU-CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4040

The CVE-2014-4040 issue affects powerpc-utils, where the snap utility can generate an archive containing fstab and yaboot.conf with cleartext passwords. This could allow local/remote exposure of sensitive data if an attacker gains access to the archive via a data stream. Red Hat and SUSE advisori...

NeginGroup CMS Multiple Vulnerability

Sql Injection And Xss Vulnerability In NeginGroup Cms @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@...

openSUSE Security Update : mailman (openSUSE-SU-2012:0660-1)

local users could read mailman's mail archive %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-298. The text description of this plugin is C SUSE LLC...

CVE-2010-5300

Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name in a zip archive...

Stack overflow

Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name in a zip archive...

CVE-2010-5300

CVE-2010-5300 affects Jzip versions 1.3 through 2.0.0.132900, where a stack-based buffer overflow is triggered by a long file name in a zip archive. This vulnerability allows remote attackers to crash the process (denial of service) and, in some cases, may enable arbitrary code execution. Several...

CVE-2010-5300

Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name in a zip archive...

Debian Security Advisory DSA 2953-1 (dpkg - security update)

Multiple vulnerabilities were discovered in dpkg that allow file modification through path traversal when unpacking source packages with specially crafted patch files. This update had been scheduled before the end of security support for the oldstable distribution squeeze, hence an exception has...