CVE-2011-0385: Undefined Security Weakness

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary cod...

PT-2011-2307

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface allows remote attackers to create or overwrite arbitrary files, and possibly...

Cisco Security Agent Management Console st_upload File Creation

The Management Console webagent.exe in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted stupload request. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC...

CVE-2011-0364: Improper Control of Generation of Code

The Management Console webagent.exe in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted stupload request...

Microsoft Windows - Print Spooler Service Impersonation (MS10-061) (Metasploit)

$Id: ms10061spoolss.rb 11766 2011-02-17 19:22:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Low: Red Hat Security Advisory: bash security and bug fix update

Updated bash packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

PT-2011-2293

Name of the Vulnerable Software and Affected Versions Cisco Security Agent versions 5.1 through 6.0 before 6.0.2.145 Cisco Security Agent version 6.0 before 6.0.2.145 Description The issue allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a...

Cisco Security Agent Management st_upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Security Agent Management Console. Authentication is not required to exploit this vulnerability. The flaw exists within the webagent.exe component which is handed requests by an Apache instan...

PT-2011-2822

Name of the Vulnerable Software and Affected Versions feh versions 1.11.2 and earlier Description The issue is related to the feh unique filename function in utils.c, which might allow local users to create arbitrary files via a symlink attack on a /tmp/feh temporary file. Recommendations For feh...

CVE-2011-1031: Improper Link Resolution Before File Access

The fehuniquefilename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh temporary file, a different vulnerability than CVE-2011-0702...

Opera Web Browser 11.00 - Integer Overflow

Opera Web Browser 11.00 - Integer Overflow +Exploit Title: Exploit Integer Overflow Opera Web Browser 11.00 +Date: 24\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://get12.opera.com/pub/opera/win/1100/int/Opera1100intSetup.exe +Version: 11.00 +Tested On: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE:...

Oracle Beehive voice-servlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Beehive. Authentication is not required to exploit this vulnerability. The specific flaw exists within 'voice-servlet/prompt-qa/Index.jspf'. During the creation of a file used for storing an...

CVE-2010-4695: Improper Restriction of Operations within the Bounds of a Memory Buffer

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

PCSX2 0.9.7 beta Binary Denial of Service Vulnerability

Exploit for windows platform in category dos / poc ======================================================= PCSX2 0.9.7 beta Binary Denial of Service Vulnerability ======================================================= Exploit Title: PCSX2 v0.9.7 Crash Date: 08/11/2010 Author: 41.w4r10r Version:...

kernel security update

2.6.18-194.17.4.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina Yang orabug...

glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation

This module attempts to gain root privileges on Linux systems by abusing a vulnerability in the GNU C Library glibc dynamic linker. glibc ld.so in versions before 2.11.3, and 2.12.x before 2.12.2 does not properly restrict use of the LDAUDIT environment variable when loading setuid executables...

ConvexSoft DJ Audio Mixer - Denial of Service

Exploit Title :ConvexSoft DJ Audio Mixer Denial of Service Vulnerability Software : ConvexSoft DJ Audio Mixer Software link :...

Ease Jukebox 1.30 - Denial of Service

Ease Jukebox 1.30 - Denial of Service Exploit Title :Ease Jukebox 1.30 Dos vulnerability Software : Ease Jukebox 1.30 Software link : http://www.mymusictools.com/all-in-onejukebox9/easejukebox4040.htm Autor : Sweet Email : [email protected] Software version : 1.30 Tested on : WinXP sp3 ENG vm t...

CVE-2010-3692

Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directory traversal sequences in a Proxy Granting Ticket IOU PGTiou parameter...

PT-2010-5005

Name of the Vulnerable Software and Affected Versions phpCAS versions prior to 1.1.3 Description The issue allows remote attackers to create or overwrite arbitrary files via directory traversal sequences in a PGTiou parameter when proxy mode is enabled. This is due to a directory traversal...