CVE-2010-3369

The 1 mdb and 2 mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Unrestricted File I/O can be used by Widgets to execute arbitrary code

Widgets may use File I/O to create, read, modify, or delete files, with the user's permission. When using this functionality, Opera should request permission from the user, and ask for a location to use for the files that will be manipulated. In some cases, Opera fails to ask for permission, and...

mysql: Incomplete fix for CVE-2008-2079 / CVE-2008-4098

MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future...

LDAP Injection Vulnerability

Exploit for unknown platform in category local exploits ============================ LDAP Injection Vulnerability ============================ + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact :...

Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)

!/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0:...

EUVD-2008-2856

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities

Syhunt: HFS HTTP File Server Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities Advisory-ID: 200801162 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 2.2 to and including 2.3Beta Build 174 Non-Affected Applications: HFS 2.1d and earlier...

CVE-2007-6481

Technical details are not publicly available in the provided documents; no affected products/versions or vectors are specified. Monitor for updates.

Hidden ASP the back door of the three methods-vulnerability warning-the black bar safety net

1, The establishment of a non-standard directory: mkdir images..\ A copy of the ASP Trojan to the directory: copy c:\inetpub\wwwroot\news.asp c:\inetpub\wwwroot\images..\news.asp Through the web Access ASP Trojan: http://ip/images../news.asp?action=login How to delete a non-standard directory:...

Path traversal

Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously...

Xaraya index.php module Parameter Traversal Arbitrary File/Directory Manipulation

The version of Xaraya installed on the remote host does not sanitize input to the 'module' parameter of the 'index.php' script before using it to write to files on the affected host. Using a specially crafted request, an unauthenticated attacker can create directories and possibly overwrite...

CVE-2005-0685

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

Apple Mac OSX 10.2.2 - Directory Kernel Panic (Denial of Service)

Apple Mac OSX 10.2.2 - Directory Kernel Panic Denial of Service source: https://www.securityfocus.com/bid/6331/info Mac OS X is the BSD-derived operating system distributed and maintained by Apple Sofware. It has been reported that a denial of service exists in OS X. When a user creates a...

Apple Mac OSX 10.2.2 - Directory Kernel Panic (Denial of Service)

source: https://www.securityfocus.com/bid/6331/info Mac OS X is the BSD-derived operating system distributed and maintained by Apple Sofware. It has been reported that a denial of service exists in OS X. When a user creates a directory, descends it, creates another directory of the same name, the...

Security problems with TWIG webmail system

Twig is a popular webmail system written in PHP, once called Muppet. Author: Christopher Heschong Homepage: http://twig.screwdriver.net Version: 2.5.1 latest Problem: The possibility of processing our own php file , can leed to arbitrary command execution on the server as the httpd user. Status:...

CVS Kit CVS Server 1.10.8 - Checkin.prog Binary Execution

CVS Kit CVS Server 1.10.8 - Checkin.prog Binary Execution source: https://www.securityfocus.com/bid/1524/info A CVS committer can execute arbitrary binaries by using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when the directory is "checkout"ed and...

HM Software S to Infinity 3.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/1368/info A number of vulnerabilities exist in HM Software S to Infinity, a security access control, desktop lockdown and transparent encryption application. Intended features include restriction of access to folders, files, floppy and CD-ROM drives, etc...