3462 matches found
easy file sharing web server 5.8 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...
KingView 6.53 - ActiveX Remote File Creation / Overwrite (KChartXY)
No description provided by source. !-- KingView ActiveX Control KChartXY Remote File Creation / Overwrite Vendor: http://www.wellintech.com Version: KingView 6.53 Tested on: Windows XP SP3 / IE Download: http://www.wellintech.com/documents/KingView6.53EN.zip Author: Blake CLSID:...
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary, attacker-controlled content. Successful exploits may compromis...
S8Forum 3.0 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6547/info S8Forum is prone to a remote command execution vulnerability. When a user registers with the forum, a file is created locally with the specified username. The contents of this file will be the data entered by th...
PHP Easy Downloader <= 1.5 - Remote File Creation Exploit
No description provided by source. !/usr/bin/perl -------------------------------------------------------- PHP Easy Downloader = 1.5 Remote File Creation Exploit By StAkeR aka athos - StAkeRathotmaildotit On 17/10/2008 http://www.hasemithut.de/downloads/index.php...
HFS HTTP File Server 1.5/2.x Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27423/info HFS HTTP File Server is prone to multiple security vulnerabilities, including cross-site scripting issues, an information-disclosure issue, an arbitrary file-creation issue, a denial-of-service issue, a...
IBM AIX 4.2.1 portmir Buffer Overflow & Insecure Temporary File Creation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowed malicious users to obtain root privileges. Secondly...
freewebshop.org script <= 2.2.2 - Multiple Vulnerabilities
No description provided by source. Product: www.freewebshop.org Version: 2.2.x, maybe lower Critical Lvl : Highly critical Where : From Remote Exploits: Bypass Login: username:admin password:' or 'a'='a Read Files: /index.php?page=info&action=../../../../../../../../../../../../etc/passwd%00 List...
MacOSXLabs RsyncX 2.1 Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11212/info RsyncX is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A local attacker may exploit...
Samba 2.0.x/2.2 - Remote Arbitrary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2928/info Samba is a freely available file and printer sharing application maintained and developed by the Samba Development Team. Samba allows file and printer sharing between operating systems on the Unix and Microsoft...
Sun Workshop 5.0 Licensing Manager Symlink Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/998/info A vulnerability exists in the installation of licenses for Sun's WorkShop 5.0 compilers, and other Sun products which use the FlexLM license management system. As part of the installation process, the 'lit' progr...
Microsoft IIS 3.0 newdsn.exe File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1818/info Microsoft IIS 3.0 came with a sample program, newdsn.exe, installed by default in the directory wwwroot/scripts/tools/. Execution of this program with a properly submitted URL could allow for remote file creatio...
GOMPlayer 2.2.53.5169 (.wav) - Crash PoC
No description provided by source. Exploit Title: GOMPlayer Version 2.2.53.5169 .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html?part=dl-GOMMediaP&subj=dl&tag=button Version: 2.2.53.5169 Probably old versi...
MySQL 4.x CREATE FUNCTION Arbitrary libc Code Execution
No description provided by source. source: http://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary file-creation vulnerability...
IBM AIX eNetwork Firewall 3.2/3.3 Insecure Temporary File Creation Vulnerabilities
No description provided by source. soure: http://www.securityfocus.com/bid/287/info IBM's eNetwork Firewall for AIX contains a number of vulnerability in scripts which manipulate files insecurely. When fwlsuser script is run it creates a temporary file called /tmp/fwlsuser.PID where PID is the...
SUSE 7.0 KFM Insecure TMP File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2629/info KFM is the KDE File Manager, included with version 1 of the KDE base package in most Linux installations. KFM is designed as a graphical, easily navigated interface to the Linux Filesystem. A problem with KFM...
Ease Jukebox 1.30 - Denial of Service Vulnerability
No description provided by source. Exploit Title :Ease Jukebox 1.30 Dos vulnerability Software : Ease Jukebox 1.30 Software link : http://www.mymusictools.com/all-in-onejukebox9/easejukebox4040.htm Autor : Sweet Email : [email protected] Software version : 1.30 Tested on : WinXP sp3 ENG vm thx ...
Cscope <= 15.5 Symlink Vulnerability Exploit
No description provided by source. / RXcscope exploit version 15.5 and minor / include stdio.h include stdlib.h include sys/types.h include unistd.h define BSIZE 64 int mainint ac, char av pidt cur; uint i=0, lst; char bufferBSIZE + 1; fprintfstdout, \n -- Cscope Exploit --\n\ version 15.5 and...
IRIX 6.5.x inpview Race Condition Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked multimedia...
Sun Connection Update Manager for Solaris Multiple Insecure Temporary File Creation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38928/info Sun Connection Update Manager for Solaris creates temporary files in an insecure manner. An attacker with local access could potentially exploit these issues to perform symbolic-link attacks, overwriting...