samba 2.x call_trans2open() exploit

0day is fragile! one day it's your precious, next day its worthless ... anyways i put together this SAMBAExploit class in python which might be interesting for folks since it's reusable in many other stuff ... python cause; write once a heap, stack or fmt string exploit class and the rest is just...

Information leakage via key file duplication during nCipher import

generatekey utility creates temporary PEM file and fails to delete it...

CVE-1999-1056

Technical details about CVE-1999-1056 are not publicly available in the provided documents. Monitor for updates as new information may be released.

CVE-2000-0396

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...

CVE-2000-0396

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known director...

Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure

source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known directory on the target host through add.exe in /scripts/Carello. Accessing...

CVE-2024-1866

CVE-2024-1866 is a duplicate of CVE-2023-2813. Connected data describe a reflected Cross-Site Scripting (XSS) issue affecting multiple WordPress themes (e.g., Aapna, Anand, Anfaust, Arendelle, etc.) where the search box reflects results, enabling an unauthenticated user to trigger XSS by clicking...

CVE-2023-26812

CVE-2023-26812 is rejected/not used; this record does not represent an active vulnerability entry.

CVE-2023-50119

CVE-2023-50119 is a reservation duplicate of CVE-2023-45292; the entry is not to be used. Connected docs confirm CVE-2023-45292 describes a Captcha verification bypass in the default Verify path of base64Captcha, where certain parameter values (non-existent id, empty string, third param true) can...