8813 matches found
CVE-2010-5236
CVE-2010-5236 affects Roxio Easy Media Creator Home 9.0.136. The vulnerability is an untrusted search path that allows local users to gain privileges via a Trojan horse homeutils9.dll placed in the current working directory. Demonstrations reference directories containing .roxio, .c2d, or .gi fil...
CVE-2010-5267
Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from...
CVE-2010-5267
CVE-2010-5267 affects MunSoft Easy Office Recovery 1.1. An untrusted search path vulnerability allows local users to gain privileges via a Trojan horse dwmapi.dll loaded from the current working directory when a directory contains a .doc, .xls, or .ppt file. The root cause is a DLL search order h...
CVE-2010-5236
Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file. NOTE: some of these details are...
CVE-2010-5267: Undefined Security Weakness
Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from...
CVE-2010-5236: Undefined Security Weakness
Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file. NOTE: some of these details are...
CVE-2011-5117: Concurrent Execution using Shared Resource with Improper Synchronization
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of 1 out-of-date credentials and 2 invalid credentials, which allows physically proximate attackers to defeat t...
Easy Banner Pro Local File Inclusion
----------------------------------------------------------- Easy Banner Pro index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/ Demo - http://www.scripts-demo.com/easybannerpro/ ISRAEL...
Easy Banner Pro - index.php Local File Inclusion
Easy Banner Pro - index.php Local File Inclusion ----------------------------------------------------------- Easy Banner Pro index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/ Demo -...
Easy Banner Pro (index.php page) Local File Inclusion
Exploit for php platform in category web applications ----------------------------------------------------------- Easy Banner Pro index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/ Demo -...
Easy Banner Pro - 'index.php' Local File Inclusion
----------------------------------------------------------- Easy Banner Pro index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/ Demo - http://www.scripts-demo.com/easybannerpro/ ISRAEL...
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-7.fc17
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
WordPress Easy Comment Uploads Shell Upload
Exploit Title : Wordpress Easy Comment Uploads Shell Upload Vulnerability Author : Nafsh Discovered By : Tapco Security & Research Lab Home : sec-lab.ir Contact : research at sec-lab dot ir Date : 4/8/2012 - 13:33 Source : plugins.svn.wordpress.org/easy-comment-uploads/tags/0.60/upload.php DorK :...
CMS DMS-Easy 0.9.8 CSRF / File Disclosure / Shell Upload
1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0 x Official Website: http://www.1337day.com 1 1 x...
XAMPP Windows 1.7.7 SQL Injection / Cross Site Scripting
$------------------------------------------------------------------------------------------------------------ $ XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :http://www.apachefriends.org/en/xampp-windows.html $ Date...
Joomla Easy Flash Uploader 2.0 Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Joomla! Component Easy Flash Uploader - 'helper.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/53977/info The Easy Flash Uploader component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...
Joomla! Component Easy Flash Uploader - helper.php Arbitrary File Upload
Joomla! Component Easy Flash Uploader - helper.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53977/info The Easy Flash Uploader component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize...
Joomla - Easy Flash Uploader Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Fedora 15 : groff-1.21-4.fc15 (2012-8590)
older security fixes : - CVE-2009-5044: insecure temporary file handling in pdfroff - CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph - CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names Note that...