438 matches found
File Thingie 2.5.5 - File Security Bypass
Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website: http://www.redteamsecure.com/labs Date: 5/15/2010 Application: File Thingie Version: 2.5.5 Link: http://www.solitude.dk/filethingie/download Description: There are security controls in place that...
CVE-2009-4488
Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...
CoolPlayer 2.15 Crash
!/usr/bin/perl Founded By :d3b4g CoolPlayer2.15 .M3U Local Buffer Overflow PoC download: http://www.soft32.com/Download/Free/CoolPlayer215/4-570-1.html EAX 00000001 ECX 4ED83DEA EDX 00000000 EBX 001226D0 ASCII"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" ESP 00122428...
CVE-2009-1182
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...
xterm: arbitrary command injection
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...
CVE-2008-4929
MyBB 1.4.2 stores attachments with filenames generated using insufficient randomness, allowing remote attackers to read files by guessing names. Affected component: attachment filename generation. Impact: partial confidentiality of attachment contents. Root cause: weak randomness in filename cons...
Code injection
WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file...
PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass
WinExec"cmd.exe /c $command "$...
CVE-2007-4400
CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...
Moderate: Red Hat Security Advisory: file security update
An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...
samba heap overflows
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...
Moderate: file security update
4.10-3.EL4.5 - Resolves: 233161: CVE-2007-1536: file 4.20 fixes a heap overflow in that can result in arbitrary code...
php remote file inclusion vulnerability-vulnerability warning-the black bar safety net
Author:Zizzy Two years ago the article, to estimate for the php contains a vulnerability smattering of 2004-3-7 In this article I will tell php remote file inclusion vulnerability principle, the beginning involved a programmer who must-see. The first question is, what is”remote file inclusion...
Creasito E-Commerce Content Manager - 'admin' Authentication Bypass
============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...
Symantec Brightmail AntiSpam multiple security vulnerabilities
It's possible to DoS system and access system files if control center access is enabled from any computer...
CVE-2006-2910
CVE-2006-2910 describes a buffer overflow in jetAudio 6.2.6.8330 (Basic) and possibly other versions. The vulnerability is triggered when an audio file (e.g., WMA) contains long ID3 tag values for Title, Author, or Album, causing an overflow in the tooltip display string if the sound card driver ...
[SA18159] Information Call Center "CallCenterData.mdb" Exposure of User Credentials
TITLE: Information Call Center "CallCenterData.mdb" Exposure of User Credentials SECUNIA ADVISORY ID: SA18159 VERIFY ADVISORY: http://secunia.com/advisories/18159/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Information Call Center...
CVE-2004-2591
The CVE-2004-2591 issue affects ButtUglySoftware CleanCache 2.19. The vulnerability arises from the data-overwrite capability not properly overwriting data in files, allowing recovery of previously stored data. According to the records, the impact is partial confidentiality with a local attack ve...
simplephpBlog040.txt
. || | | .. \ \ | \ | | | | | |\ | | /| | /|/ | || || / Where is the security? ... Security Advisory 2005-0x00 Authors......... pjphem && LazyCrs Date............ 07/07/2005 Vendor.......... www.simplephpblog.com Type............ SimplePHPBlog 0.4.0 = Remote Password Disclosure o The Problem:...