138 matches found
SOOP Portal 2.0 IIS parsing upload vulnerability-vulnerability warning-the black bar safety net
Publishing author: Net. Edit0r Affected versions: SOOP Portal 2.0 Official address: upload/2 0 1 0/1 2/2 0 1 0 1 2 0 7 1 9 4 0 2 9 3 6 8 6. jpg can be uploaded and executed. Google Dork : "SOOP Portal 2.0" 1. Register On Site //the first step to register as a website member; 2...
AWStats fails to properly handle "\\" when specifying a configuration file directory
Overview AWStats fails to properly handle "\" when specifying a configuration file directory. This could allow an attacker to specify an arbitrary configuration file located on an SMB share. Description From the AWStats project website: "AWStats is a free powerful and featureful tool that...
Joomla Component SMEStorage Local File Inclusion
No description provided by source. --------------------------------------------------------------------------------- Joomla Component SMEStorage Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email...
Joomla! Component SMEStorage - Local File Inclusion
Joomla! Component SMEStorage - Local File Inclusion --------------------------------------------------------------------------------- Joomla Component SMEStorage Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...
Joomla SMEStorage Local File Inclusion
--------------------------------------------------------------------------------- Joomla Component SMEStorage Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : chipdebiosalt+64gmail.com...
Joomla! Component SMEStorage - Local File Inclusion
--------------------------------------------------------------------------------- Joomla Component SMEStorage Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : chipdebiosalt+64gmail.com...
phpMyAdmin 2.2.0 及之前版本文件目录遍历漏洞
No description provided by source...
CVE-2008-7009
Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information...
Debian DSA-1533-2 : exiftags - insufficient input sanitizing
Christian Schmid and Meder Kydyraliev Google Security discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems : - CVE-2007-6354 Inadequate EXIF property...
Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities
Syhunt: HFS HTTP File Server Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities Advisory-ID: 200801162 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 2.2 to and including 2.3Beta Build 174 Non-Affected Applications: HFS 2.1d and earlier...
CVE-2006-6579
Microsoft Windows XP has weak permissions FILEWRITEDATA and FILEREADDATA for Everyone for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAMmachine and read access by IUSRMachine...
BFTPd 1.0.12 Remote Exploit
No description provided by source. / Creates a filname to exploit the bug in bftpd 1.0.12 Create the file, cwd in the shell directory and nlist the file directory. Coded by korty [email protected] / include stdlib.h include string.h include stdio.h include fcntl.h define LEN 205 int main int argc, ch...
OSU HTTP Server 3.10/3.11 - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/20098/info OSU Ohio State University HTTP server is prone to multiple information-disclosure vulnerabilities. This may allow a malicious user to gain access to sensitive data; information gained may aid in further attacks. Versions 3.11a and 3.10a are...
Design/Logic Flaw
The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions...
Xaraya Directory Traversal Arbitrary File/Directory Manipulation
Binary data 3305.prm...
GLSA-200504-15 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-15 PHP: Multiple vulnerabilities An integer overflow and an unbound recursion were discovered in the processing of Image File Directory tags in PHP's EXIF module CAN-2005-1042, CAN-2005-1043. Furthermore, two infinite loops...
[Full-Disclosure] WinHKI - CAB File Directory Transversal
Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: CAB File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1 Introduction 2...
[Full-Disclosure] WinHKI - BH File Directory Transversal
Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: BH File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1 Introduction 2 Bu...