Kiwi CatTools < 3.2.9 TFTP Server Traversal Arbitrary File Manipulation

The remote host appears to be running Kiwi CatTools, a freeware application for device configuration management. The TFTP server included with the version of Kiwi CatTools installed on the remote host fails to sanitize filenames of directory traversal sequences. An attacker can exploit this issue...

CVE-2007-1035

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...

CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

CVE-2007-0657

Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir command...

Hacking tips related to the HTML code of alternative application-vulnerability warning-the black bar safety net

This is a on the HTML code of the attack, although the short point home to see how that can be achieved. Now the Windows operating system is really very easy, even the formatting is using only the mouse a little bit you can, not as before to the input command to complete the grid plate. We're goi...

Mac OS X 10.4.8 (UserNotificationCenter) Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby Copyright c 2007 Kevin Finisterre kflists at digitalmunition.com Lance M. Havok lmh at info-pull.com All pwnage reserved. "Exploit" for MOAB-22-01-2007: All your crash are belong to us. require 'fileutils' bugselected = ARGV0 || 0.toi...

CVE-2007-0367

The CVE-2007-0367 entry concerns Rumpus 5.1 and earlier, where weak permissions for files/directories under /usr/local/Rumpus (including the configuration file) allow local users to create, modify, or delete files, with an unknown impact. The available sources (NVD entry and related records) conf...

GLSA-200701-10 : WordPress: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-10 WordPress: Multiple vulnerabilities When decoding trackbacks with alternate character sets, WordPress does not correctly sanitize the entries before further modifying a SQL query. WordPress also displays different error...

Apple Mac OSX 10.4.8 - DiskManagement BOM 'cron' Local Privilege Escalation

!/usr/bin/ruby c 2006 LMH code from the other exploit, porting Kevin Finisterre crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one. And works like a charm. require 'fileutils' EVILCOMMANDS = "rm...

CVE-2006-6731

Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...

See how hackers to your system species on the Trojans! - Vulnerability warning-the black bar safety net

I believe that many friends have heard of the Trojans, always feel it is very mysterious, very difficult, but in fact with the Trojan software intelligent, a lot of hackers are able to easily achieve the attack purpose. Today, the author in the latest of a Trojan horse-the black hole 2 0 0 4, fro...

CVE-2006-5705

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

Product: www.freewebshop.org Version: 2.2.x, maybe lower Critical Lvl : Highly critical Where : From Remote Exploits: Bypass Login: username:admin password:' or 'a'='a Read Files: /index.php?page=info&action=../../../../../../../../../../../../etc/passwd%00 List Passwords:...

ActiveX security leaks in the TV owned web game platform

There is a security problem within the architecture / design issues of the BlooMooWeb ActiveX control. BlooMooWeb is an internet game platform for kids, popular mainly in Poland. It has been provided for the TV programme "Krolestwo Maciusia" "The Kingdom of Macius" broadcast in TVP1 - first chann...

The Common Market encrypted disc crack not full tricks big secret-vulnerability warning-the black bar safety net

Now on the market there are many encrypted discs, these discs are a special form of burn. Put it into drive, it will appear a software installation screen want you to enter the serial number, if serial number is correct it will appear a file browser window, the error then jumps back to the deskto...

CA eSCC r81.0 eTrust Audit r81.5 - Arbitrary File Manipulation

CA eSCC r81.0 eTrust Audit r81.5 - Arbitrary File Manipulation source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a...

CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Arbitrary File Manipulation

source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These vulnerabilities occur because the software...

[SA21826] Stefan E. Newsscript Multiple Vulnerabilities

TITLE: Stefan E. Newsscript Multiple Vulnerabilities SECUNIA ADVISORY ID: SA21826 VERIFY ADVISORY: http://secunia.com/advisories/21826/ CRITICAL: Highly critical IMPACT: Manipulation of data, Exposure of system information, Exposure of sensitive information, System access WHERE: From remote...

[Full-disclosure] Secunia Research: AOL Insecure Default Directory Permissions

====================================================================== Secunia Research 18/08/2006 - AOL Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...

[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System Advisory ID: cisco-sa-20060628-wcs http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml Revision 1.0 For Public Release 2006 June 28 1600 UTC GMT -...