BB4 Big Brother Network Monitor 1.5 d2 bb-hist.sh HISTFILE Parameter File Existence Disclosure

No description provided by source. source : http://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway...

MS IE 5.0 Media Player ActiveX Error Message Vulnerability

No description provided by source. Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 Media Player ActiveX Error Message Vulnerability source: http://www.securityfocus.com/bid/793/info The Windows Media Player ActiveX control, shipped with IE 5, returns a specific...

Adobe Acrobat 7.0, Adobe Reader 7.0 File Existence and Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13962/info Adobe Acrobat and Adobe Reader may allow remote attackers to determine the existence of files on a vulnerable computer. This issue can be used to disclose data from a target file as well. Information gathered...

FrontPage 98/Personal WebServer 1.0,Personal Web Server 2.0 htimage.exe File Existence Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/1141/info htimage.exe can be used to determine if a specified path and filename exists on the target host or not. The specified path must be on the same logical drive as the web content. Any file can be specified as an...

ThinkPHP the Ubb tag vulnerability to read arbitrary contents of the-vulnerability warning-the black bar safety net

Brief description: ThinkPHP the Ubb tags, there is a code highlighting function, that satisfies: xxx/c odeorp hpxxx/p hpwhen it comes to the middle of the xxx to read, and highlight, the xxx is the path, and the non-specific code, as in Figure 1,The input path, when the file exists, the return is...

Seagate BlackArmor - Root Exploit

Exploit for hardware platform in category web applications Public Release v0.2 abstract class MD5Decryptor abstract public function probe$hash; public static function plain$hash, $class = NULL if $class === NULL $class = getcalledclass; else $class = sprintf"MD5Decryptor%s", $class; $decryptor =...

To solve the FCKEDITOR to remove all the upload page how to upload invasion-vulnerability warning-the black bar safety net

Long time no script invasion,today for participating in a match,then the certificate actually needs the money to buy,it is very uncomfortable,Baidu took under its official website,for a security,the result is not successful,because the iis file parsing vulnerability patch on,but learned some of t...

Oracle Linux 4 : xorg-x11 (ELSA-2008-0030)

From Red Hat Security Advisory 2008:0030 : Updated xorg-x11 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 The original...

shopex绕过补丁本地包含漏洞#4

简要描述： 360提交的漏洞，官方修复不严谨 详细说明： http://bbs.webscan.360.cn/forum.php?mod=viewthread&tid=8613&extra=page%3D1 修复前： 修复后（\core\api\shopapi.php）： if isset$REQUEST'appname' $appName = pregreplace'/^a-z0-1/i', '', $REQUEST'appname'; elseif strpos$apiAct, ':' 0 // request plugin api list$appName, $apiAct =...

VulnCheck KEV: CVE-2017-16959

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP...

CVE-2012-6469

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

CVE-2012-6469

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

Error pages can be used to guess local file paths – Opera Security Advisories

Remote web pages should not be able to detect what files a user has on their local machine. Certain error pages do not apply this restriction correctly, allowing web pages to produce an error page where a script can run. The script can then use various events to detect whether files on the user’s...

CVE-2012-3489

CVE-2012-3489 affects PostgreSQL’s core server libxml2 support. The issue arises in the libxml2-based parsing path where the xml_parse function can be manipulated via an XML value that references a DTD or an external entity, enabling remote authenticated users to determine the existence of arbitr...

CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

DEBIAN-CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

UBUNTU-CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

CVE-2012-1586

CVE-2012-1586 affects mount.cifs in cifs-utils 2.6, enabling local users to infer the existence of arbitrary files/directories via the path in the second argument through error messages. The issue is cited across multiple advisories (SUSE, openSUSE, OpenVAS/Nessus feeds, MiracleLinux AXSA:2012-59...

Mandriva Update for cifs-utils MDVSA-2012:069 (cifs-utils)

Check for the Version of cifs-utils OpenVAS Vulnerability Test Mandriva Update for cifs-utils MDVSA-2012:069 cifs-utils Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Scientific Linux Security Update : xorg-x11-server on SL5.x i386/x86_64 (20120221)

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use thi...