CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

[SECURITY] Fedora 9 Update: tqsllib-2.0-5.fc9

The TrustedQSL library is used for generating digitally signed QSO records records of Amateur Radio contacts. This package contains the library and configuration files needed to run TrustedQSL applications...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

lynx security update

CentOS Errata and Security Advisory CESA-2008:0965 An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based W...

lynx security update

2.8.5-28.1.1 - add patch for CVE-2008-4690 rhbz468184 - prompt user before executing commands from the lynxcgi: handler, even in the advanced user mode - mark all lynxcgi: URIs as untrusted in the default lynx.cfg - add patch to prevent lynx from opening configuration files in the current working...

[SECURITY] Fedora 8 Update: bluez-utils-3.35-3.fc8

Bluetooth utilities bluez-utils: - hcitool - hciattach - hciconfig - hcid - l2ping - start scripts Red Hat - pcmcia configuration files The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP04 security update

Updated JBoss Enterprise Application Platform JBEAP 4.2 packages that fix various security issues are now available for Red Hat Enterprise Linux 4 as JBEAP 4.2.0.CP04. This update has been rated as having low security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability

Exploit for unknown platform in category remote exploits ================================================================= Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability ================================================================= Luigi Auriemma Application: Unreal...

unreal-1.3-dirtrav.txt

Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server Date: 21 Sep 2008 Author: Luigi...

[SECURITY] Fedora 8 Update: fedora-package-config-smart-8-12.0.2.transitional

This package contains Fedora configuration files for the Smart package manager...

[SECURITY] Fedora 9 Update: fedora-package-config-apt-9-3.transitional

This package contains apt-rpm configuration files for Fedora Core, Updates and Extras...

[SECURITY] Fedora 9 Update: fedora-package-config-smart-9-13.0.2.transitional

This package contains Fedora configuration files for the Smart package manager...

GeekLog <= 1.5.0 Remote Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + GeekLog = 1.5.0 Remote Arbitrary File Upload + + + + Discovered && Coded By: t0pP8uZz + + + + 0day?!?Most...

GeekLog 1.5.0 - Arbitrary File Upload

!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/fckeditor/editor/filemanager/upload/php/upload.php', ContentType =...

Design/Logic Flaw

The Axesstel AXW-D800 modem with D2ETH10901VEBR Jun-14-2006 software does not require authentication for 1 etc/config/System.html, 2 etc/config/Network.html, 3 etc/config/Security.html, 4 cgi-bin/sysconf.cgi, and 5 cgi-bin/route.cgi, which allows remote attackers to change the modem's configurati...

CVE-2008-3411

The Axesstel AXW-D800 modem with D2ETH10901VEBR Jun-14-2006 software does not require authentication for 1 etc/config/System.html, 2 etc/config/Network.html, 3 etc/config/Security.html, 4 cgi-bin/sysconf.cgi, and 5 cgi-bin/route.cgi, which allows remote attackers to change the modem's configurati...

affolderdirectorytraversal-08_002.txt

Portcullis Security Advisory - 08-002 Vulnerable System: Affinium Campaign Vulnerability Title: The web application's create a new folder functionality is vulnerable to a directory traversal. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Neil...

MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities

MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may...