udev Persistence

This module will add a script in /lib/udev/rules.d/ in order to execute a payload written on disk. It'll be executed with root privileges everytime a network interface other than l0 comes up. Execution is triggered through at command, so it must be installed on the target. Module Options msf use...

CVE-2003-0876: Undefined Security Weakness

Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged copied from a mounted volume such as a disk image DMG, which could cause the directories to have less restrictive permissions than intended...

Pablo FTP Service multiple bugs

Anonymous user has full disk access by default. Passwords are stred in cleartext...

ST FTP directory traversal

It's possible to perform cd to any disk...

BEA Weblogic cleartext passwords

Passwords are stored on disk in cleartext...

ScriptLogic sets insecure permissions on "LOGS$" share

Overview Version 4.01 of ScriptLogic contains a vulnerability in the default permissions assigned to the network share used for logging. Description The ScriptLogic product from ScriptLogic, Inc. provides remote system administration capabilities for Microsoft Windows systems in a domain...

[Opera 7] Yet Another Story of "Phantom of the Opera"

Greetings. We, :: Operash :: here release the information about vulnerability of Opera. --------------------------------------------------------------------------------- SYNOPSIS : Opera 7 Script Injection Vulnerability in JavaScript Console - Yet another story of "Phantom of the Opera". PRODUCT ...

WihPhoto (PHP)

Informations : °°°°°°°°°°°°°° Version : 0.86-dev Website : http://www.wihsy.com problem : All files from the hard disk can be send by mail PHP Code/Location : °°°°°°°°°°°°°°°°°°° util/email.php : ------------------------------------------------------------------------ ? class CMailFile var...

3ware Disk Managment 1.10 - HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/6734/info A denial of service condition has been reported in 3ware's Disk Management 3DM by sending a malformed HTTP request to port 1080. Successful exploitation of this vulnerability may cause the 3DM server to crash. GET / HTTP/1.1 Host: foo...

3ware Disk Managment 1.10 - HTTP Request Denial of Service

3ware Disk Managment 1.10 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6734/info A denial of service condition has been reported in 3ware's Disk Management 3DM by sending a malformed HTTP request to port 1080. Successful exploitation of this vulnerability may cause t...

CVE-2002-2172

Informed 1 Designer and 2 Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information...

CVE-2002-1266

Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."...

CVE-2002-1154

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service disk consumption by using the command to report updates more frequently and fill the web server error log...

CVE-2002-1154

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service disk consumption by using the command to report updates more frequently and fill the web server error log...

CVE-2002-0901: Undefined Security Weakness

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...

Unauthorized disk blocks access in FreeBSD ffs

Bug in maximum file size calculation allows to access disk blocks behind the file because of integer overflow...

Security holes in Powerboard forum

Product : Powerboards http://powerboards.sourceforge.net/ Versions : 2.2b and less ? Problems : - Cross Site Scripting - Path disclosure - Access to the administration - Access to users accounts without password - Recovery of admins/users passwords - Suppression of messages - Writing on the hard...

Directory traversal in PCI NetSupport Manager

Directory traversal in web manager allows read access to whole disk content...

DLA-18-03-2002.txt

Digit-Labs Security Advisory http://www.digit-labs.org/ Advisory Name: MS99-040 Exploit Release Date: 18.3.2002 Application: Tested on IE5.0 & IE 6 Platform: Tested on Windows NT/XP Severity: Medium Authors: GoLLuM.no mailto:[email protected] Vendor Status: Known since way back in September 2...

CVE-1999-1259: Undefined Security Weakness

Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information...