4398 matches found
CVE-2012-5879: Undefined Security Weakness
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...
BlazeDVD Free Edition 6.1.1.6 Buffer Overflow
!/usr/bin/python Exploit Title:BlazeDVD Free Edition 6.1.1.6 Buffer Overflow Date: 27-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/dvd-player/ Download version 6.1.0.6: www.blazevideo.com/download.php?product=BlazeDVD Version: BlazeDVD Free Edition 6.1.1.6 Tested...
LiquidXML Studio 2010 Active-X File Creation
var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...
LiquidXML Studio 2012 Active-X File Creation
var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...
LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0-day
Exploit for windows platform in category local exploits var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...
LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation
var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...
LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation
LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell";...
packstack: answerfile creation permissions issue
PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file...
CVE-2013-1468: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...
rpi-update symlink vulnerability
Unsafe temp file creation...
SCADA 3S CoDeSys Gateway Server Directory Traversal Vulnerability
This Metasploit module exploits a directory traversal vulnerability that allows arbitrary file creation, which can be used to execute a mof file in order to gain remote execution within the SCADA system. This file is part of the Metasploit Framework and may be subject to redistribution and...
Authentication flaw
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors...
PT-2013-1919
Name of the Vulnerable Software and Affected Versions BigAntSoft BigAnt IM Message Server affected versions not specified Description The issue concerns a lack of authentication for file uploading, allowing remote attackers to create arbitrary files in a specific directory, namely...
CVE-2012-6274: Improper Authentication
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors...
CVE-2012-5375
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service prevention of file creation by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with ...
CVE-2012-5375
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service prevention of file creation by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with ...
CVE-2012-5375
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service prevention of file creation by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with ...
PT-2013-1793
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8-rc1 Description The issue allows local users to cause a denial of service by preventing file creation. This is achieved by writing to a directory important to the victim and creating a file with a crafted nam...
CVE-2012-5375: Undefined Security Weakness
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service prevention of file creation by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with ...
