f-fileman 7.0 - Directory Traversal

f-fileman 7.0 - Directory Traversal Advisory: ffileman 7.0 Directory Traversal Vulnerability Credits: Raffaele Forte http://www.backbox.org Tested Versions: ffileman 7.0 Software Link: http://sourceforge.net/projects/f-fileman/ Tested on: Unix Category: Directory Traversal Severity: Medium...

Nasty Data-Stealing Bug Haunts Internet Explorer 8

There’s an unpatched vulnerability in Internet Explorer 8 that enables simple data-stealing attacks by Web-based attackers and could lead to an attacker hijacking a user’s authenticated session on a third-party site. The flaw, which a researcher said may have been known since 2008, lies in the wa...

Multiple directory Traversal Vulnerabilites in Testlink TestManagement

Exploit for unknown platform in category web applications =========================================================================================== Multiple directory Traversal Vulnerabilites in Testlink TestManagement and Execution System...

Sourcefire 3D Sensor and DC, privilege escalation vulnerability

Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details --------------------- A privilege escalation vulnerabili...

IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. PK66676 - The PerfServlet code...

CVE-2008-1904

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

openSUSE 10 Security Update : rubygem-actionpack (rubygem-actionpack-4754)

Malicious users could specify their session-ID in the URL and could gain access to an authenticated session that way CVE-2007-5380. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

[Full-disclosure] Dotclear 1.* Cross Site Scripting Vulnerability

Dotclear 1. Cross Site Scripting Vulnerability 1--two cross site scripting vulnerabilities have been discovered in the dotclear1. allowing a remote attackers to hijack authenticated session Workaround: $postid trackback.php $toolurl/tools/thememng/index.php are not filtered 2-Proof of Concepts:...

Authenticated Check : OS Name and Installed Package Enumeration

This plugin logs into the remote host using SSH, RSH, RLOGIN, Telnet, or local commands and extracts the list of installed packages. If using SSH, the scan should be configured with a valid SSH public key and possibly an SSH passphrase if the SSH public key is protected by a passphrase. TRUSTED...