DirectAdmin 1.33.3 - '/CMD_DB' Backup Action Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/34676/info DirectAdmin creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic link attacks to overwrite arbitrary attacker-specified files. This could facilitate a complete...

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

HTML Email Creator 2.1b668 - html Local Overwrite (SEH)

/ :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun HTML Email Creator or or 520 | | NOPs jmp 11 pop-pop-ret NOPs shellcode NOPs 56 4 4 40 343 73 Greetz: suN8Hclf, str0ke...

Family Connections CMS 1.8.2 - Blind SQL Injection

Family Connections CMS 1.8.2 - Blind SQL Injection Salvatore "drosophila" Fresta + Application: Family Connections + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 1 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author...

CVE-2008-6591

LightNEasy "no database" aka flat version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to 1 index.php and 2 LightNEasy.php...

CVE-2008-6591

LightNEasy "no database" aka flat version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to 1 index.php and 2 LightNEasy.php...

CVE-2008-6591

CVE-2008-6591 affects LightNEasy “no database” (flat) version 1.2.2 (and possibly SQLite 1.2.2). The vulnerability allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php. Connected docs confirm the affected software and the vulnerable para...

PowerCHM 5.7 (hhp) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================ PowerCHM 5.7 hhp Local Buffer Overflow Exploit ================================================ !/usr/bin/perl Title: PowerCHM 5.7 hhp Local Buffer Overflow Exploit Summary: With PowerCHM you...

GLSA-200903-08 : gEDA: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200903-08 gEDA: Insecure temporary file creation Dmitry E. Oboukhov reported an insecure temporary file usage within the sch2eaglepos.sh script. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files...

CVE-2008-6424

The CVE-2008-6424 entry corresponds to a directory traversal flaw in FFFTP 1.96b. An attacker-controlled FTP LIST response containing .. can cause the remote FTP server to create or overwrite arbitrary files on the affected system. The vulnerability arises from how LIST command results are handle...

SupportSoft DNA Editor Module (dnaedit.dll) Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================== SupportSoft DNA Editor Module dnaedit.dll Code Execution Exploit ================================================================== !-- SupportSoft DNA Editor Module...

Elecard AVC HD Player Overflow

!/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX 00000000 ECX 41414141 EDX 775A104D ntdll.775A104D EBX...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

No description provided by source. HTML b NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation /b b br/br/ Author : Mountassif Moad a.k.a Stack br/ br/ br/ b/ RegKey Safe for Script: Falsebr/ RegKey Safe for Init: Falsebr/ Implements IObjectSafety: Truebr/ IDisp Safe: Safe for...

Enomaly ECP/Enomalism Insecure File Creation

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities 1. Synopsis All versions of Enomaly ECP/Enomalism prior to 2.1.1 use temporary files in an insecure manner, allowing for symlink and command injection attacks. 2. Impact Information Background Enomaly ECP former...

CUPS symbolic links vulnerability

Insecure /tmp/pdf.log file creation...

NCTVideoStudio 1.6 File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted: caller,data !-- Read Me :d: NCTVideoStudio is the package of ActiveX...

CVE-2008-5966

CVE-2008-5966 affects Globsy 1.0 and earlier, where globsy_edit.php allows remote attackers to create or overwrite arbitrary files via the file parameter (filename) and data parameter (file contents). Root cause is improper handling of user-supplied filename and content, enabling arbitrary file w...

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted:...

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted: caller,data !-- Read Me :d: NCTVideoStudio is the package of ActiveX...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

Exploit for unknown platform in category remote exploits ===================================================================== NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit ===================================================================== NCTVideoStudio ActiveX DLLs...