CVE-2011-1586: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. dot dot in the name attribute of a file element in a metalink file. NOTE: this...

Google Chrome 10.0.648.205 Stack Overflow

!/usr/bin/ruby +Exploit Title: Google Chrome 10.0.648.205 Stack Overflow Vulnerability +Date: 17\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.google.com/chrome +Version: 10.0.648.205 +Teste On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A About: This is a bug of the Stack Overflow that...

Wordtrainer 3.0 - .ord Local Buffer Overflow

Wordtrainer 3.0 - .ord Local Buffer Overflow !/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3...

kernel security and bug fix update

2.6.32-71.24.1.el6 - fs Revert 'fs inotify: stop kernel memory leak on file creation failure' Eric Paris 656831 656832 CVE-2010-4250 2.6.32-71.23.1.el6 - x86 Revert 'x86 mtrr: Assume SYSCFGTom2ForceMemTypeWB exists on all future AMD CPUs' Frank Arnold 683813 652208 2.6.32-71.22.1.el6 - rebuild...

DEBIAN-CVE-2011-1425

xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...

CVE-2011-1425

xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...

CVE-2011-1425

xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...

CVE-2011-1425

xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...

PT-2011-1060

Name of the Vulnerable Software and Affected Versions xmlsec1 versions prior to 1.2.17 xmlsec1-openssl versions 1.2.6 through 1.2.9 xmlsec1-openssl-devel versions 1.2.6 through 1.2.9 xmlsec1-gnutls versions 1.2.9 xmlsec1-gnutls-devel versions 1.2.9 xmlsec1-nss versions 1.2.9 xmlsec1-nss-devel...

CVE-2011-1425: Undefined Security Weakness

xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...

Easy File Sharing Web Server 5.8 Multiple Vulnerabilities

Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

Liferay Portal < 5.2.3 'exportFileName' File Creation Remote Code Execution

Binary data 5859.prm...

Easy File Sharing Web Server 5.8 Directory Traversal

------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Directory Traversal / Arbitrary File Creation Threat Level............Very Critical 5/5...

Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.sharing-file.com/ Disclosure...

Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities

Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

Medium severity flaw in QNX Neutrino RTOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20110310 Date: 10th March 2011 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: QNX Neutrino RTOS 6.5.0...

CoolZip 2.0 - zip Buffer Overflow

CoolZip 2.0 - zip Buffer Overflow !/usr/bin/perl +Exploit Title: Exploit Buffer Overflow CoolZip 2.0 +Date: 12\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.brothersoft.com/coolzip-download-7097.html +Version: 2.0 +Tested On WIN-XP SP3 Portugues Brasil +CVE: N/A xxx xxx xxxxxxxxxxx...

CVE-2010-4651: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. dot dot or full pathname, a related issue to CVE-2010-1679...

kernel: inotify memory leak

Memory leak in the inotifyinit1 function in fs/notify/inotify/inotifyuser.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory consumption via vectors involving failed attempts to create files...

CVE-2011-1347: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own...