4170 matches found
Xxe
The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...
ēØåęē³»ē»ååØéēØåčæēØ代ē ę§č”
ē®č¦ęčæ°ļ¼ čƦē»čÆ“ęļ¼ ēØåe-Learning 2.0å¦ä¹ ē®”ēē³»ē» ęē“¢ē¹å¾ inurl:lmsv5/login!loginIndexPage.action ē½ē»å®ä¾ http://58.214.233.113:8800/lmsv5/login!loginIndexPage.action http://60.216.4.162:9091/lmsv5/login!loginIndexPage.action http://139.210.99.46:8080/lmsv5/login!loginIndexPage.action httpę„ęē¹å¾ ē¬č”ē®å½ē¹å¾ attestionuserfil...
CVE-2013-4169
GNOME Display Manager gdm before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/...
Code injection
GNOME Display Manager gdm before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/...
Amazon Linux AMI : gdb (ALAS-2013-159)
GDB tried to auto-load certain files such as GDB scripts, Python scripts, and a thread debugging library from the current working directory when debugging programs. This could result in the execution of arbitrary code with the user's privileges when GDB was run in a directory that has untrusted...
MGASA-2013-0253 Updated rubygem-passenger package fixes CVE-2013-4136 & apache module
Updated rubygem-passenger package fixes security vulnerability: It was reported that Phusion Passenger would reuse existing server instance directories temporary directories which could cause Passenger to remove or overwrite files belonging to other instances CVE-2013-4136. Additionally, the...
[SECURITY] Fedora 19 Update: subversion-1.7.11-1.fc19
Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...
[SECURITY] Fedora 18 Update: fdupes-1.51-1.fc18
FDUPES is a program for identifying duplicate files residing within specifi ed directories...
[SECURITY] Fedora 17 Update: fdupes-1.51-1.fc17
FDUPES is a program for identifying duplicate files residing within specifi ed directories...
Gather eCryptfs Metadata
This module will collect the contents of all users' .ecrypts directories on the targeted machine. Collected "wrapped-passphrase" files can be cracked with John the Ripper JtR to recover "mount passphrases". This module requires Metasploit: https://metasploit.com/download Current source:...
[SECURITY] Fedora 19 Update: nodejs-fstream-0.1.23-1.fc19
Provides advanced file system stream objects for Node.js. These objects are like FS streams, but with stat on them, and support directories and symbolic links, as well as normal files. Also, you can use them to set the stats on a file, even if you don't change its contents, or to create a symlink...
Sybase EAServer 6.3.1 < 6.3.1.07 Build 63107 / 6.2 < 6.2.0.12 Build 62012 Multiple Vulnerabilities
The version of Sybase EAServer installed on the remote host is 6.3.1 earlier than 6.3.1.07 Build 63107 or 6.2 earlier than 6.2.0.12 Build 62012. As such, it is potentially affected by multiple vulnerabilities : - An unspecified error can be exploited to access otherwise inaccessible, deployed...
CVE-2013-3398
The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...
ProFTPD FTP Command Handling Symlink Arbitrary File Overwrite
The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host earlier than 1.3.4c. As such, it is potentially affected by a race condition error that does not securely create temporary files related to symlinks...
pykto
This plugin is a nikto port to python. It uses the scandatabase file from nikto to search for new and vulnerable URLs. The following configurable parameters exist: cgidirs admindirs nukedirs extradbfile mutatetests This plugin reads every line in the scandatabase and extradbfile and based on the...
find_backdoors
This plugin searches for web shells in the directories that are sent as input. For example, if the input is: http://host.tld/w3af/f00b4r.php The plugin will perform these requests: http://host.tld/w3af/c99.php http://host.tld/w3af/cmd.php http://host.tld/w3af/webshell.php ā¦ Plugin type Crawl...
dir_bruter
This plugin finds directories on a web server by brute-forcing their names using a wordlist. Given the large amount of time that this plugin can consume, by default, it will only try to identify directories in the web root "/", ignoring the path that is sent as its input. Two configurable...
dot_listing
This plugin searches for the .listing file in all the directories and subdirectories that are sent as input and if found it will try to discover new URLs from its content. The .listing file holds information about the list of files in the current directory. These files are created when download...
user_dir
This plugin will try to find user home directories based on the knowledge gained by other plugins, and an internal knowledge base. For example, if the target URL is: http://test/ And other plugins found this valid email accounts: email protected email protected This plugin will request:...
CVE-2013-1815
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications...