USN-535-1: Firefox vulnerabilities

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2007-5336, CVE-2007-5339, CVE-2007-5340 Michal Zalewski discovered that the onUnload event handlers we...

Apple iTouchiPhone 1.1.1 - .tif Remote Privilege Escalation Jailbreak

Apple iTouchiPhone 1.1.1 - .tif Remote Privilege Escalation Jailbreak milw0rm.com 2007-10-11...

Unwanted Access to File System via Import Pages Functionality

security vulnerability found in Confluence 2.5.6 Space administrator can use the "Import Pages from Disk" feature to browse the server file system by pointing the importer at "/" folder or any other folder. Because this folder doesn't contain expected files, an error message is displayed,...

PT-2007-3905 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 11.3 through 12.4 Description: The issue allows remote attackers to execute arbitrary code and have other impacts, including reading the startup-config. This can be achieved by sending a crafted MKD command that involves...

raptor_orafile.sql.txt

-- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.htm...

Oracle <= 9i / 10g File System Access via utl_file Exploit

Exploit for linux platform in category remote exploits ========================================================== Oracle -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.html. Use it to remotely -- read/write OS...

Multiple Vulnerabilities in AlternC version 0.9.5

ground418 security advisory Date: 28-11-2006 Subject: Multiple Vulnerabilities in AlternC version 0.9.5 and below. Author: Vincent Audet Mnard [email protected] Original File: http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt Related Files:...

MDaemon WebAdmin模块权限提升漏洞

WebAdmin是Alt-N开发的管理MDaemon、RelayFax和WorldClient的WEB应用程序。 由于没有正确的过滤管理界面的logfileview.wdm和configfileview.wdm文件，导致已认证的全局管理员可以通过类似于以下的方式访问基础文件系统： http://mdaemon:1000/configfileview.wdm?file=../../autoexec.bat http://mdaemon:1000/logfileview.wdm?type=webadmin&file=../../App/userlist.dat...

Cisco VPN 3000 Concentrator 4.1.7/4.7.2 - 'FTP' Remote File System Access

/ Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An unauthenticated user can use the following...

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation...

CVE-2002-1974

The CVE-2002-1974 entry concerns the FTP service in Zaurus PDAs SL-5000D and SL-5500 that does not require authentication, enabling remote attackers to access the file system as root. Affected component: FTP service on the specified Zaurus models. Root cause: unauthenticated access to the FTP ser...

CVE-2005-0349

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands...

Exploit Labs Security Advisory 2005.2

------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...

ARGENISS-ADV-030501.txt

Argeniss Security Advisory Name: Oracle Database Server Directory transversal Affected Software: Oracle Database Server versions 8i and 9i Severity : Medium Remote exploitable: Yes Authentication to Database Server is needed Credits: Cesar Cerrudo Date: 03/07/05 Advisory Number: ARG030501 Details...

CVE-2005-0496

Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands...

CVE-2005-0349

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands...

CVE-2005-0349

The CVE-2005-0349 entry covers BrightStor ARCserve Backup 11.1 UniversalAgent for UNIX, where the production release contains hard-coded credentials that enable remote access to the file system and may allow execution of arbitrary commands. Connected details specify a default/admin-like account w...

CVE-2005-0349: Undefined Security Weakness

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands...

Full path disclosure in PHP Links

Nkxtox Advisory 0000-00003 Full path disclosure in PHP Links Date: 03/10/04 Bug: http://server/phplinks/index.php?show=juax0rx Warning: maininclude/juax0rx.php: failed to open stream: No such file or directory in /home/h4x0rsit3/b0x/phplinks/index.php on line 198 Warning: main: Failed opening...

IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQL Injection, Account Manipulation, Cross-site Scripting, Information disclosure...