544 matches found
Opera 7 - Image Rendering HTML Injection
Opera 7 - Image Rendering HTML Injection source: https://www.securityfocus.com/bid/6756/info It has been reported that, when generating HTML to display images or embedded media, Opera does not correctly format the provided URL or sufficiently encode URLs to local files. As a result of this lack o...
myphpPageTool 0.4.3-1 - Remote File Inclusion
myphpPageTool 0.4.3-1 - Remote File Inclusion source: https://www.securityfocus.com/bid/6744/info myphpPageTool is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in several PHP script files in the /doc/admin folder. Under some...
CVE-2002-0694
The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to...
PHPGB 1.11.2 - PHP Code Injection
PHPGB 1.11.2 - PHP Code Injection source: https://www.securityfocus.com/bid/5679/info phpGB is subject to a PHP code injection vulnerability. After bypassing authentication it is possible to inject code into the guestbook configuration file config.php by supplying malicious parameters for the...
ICQ and MSIE allow execution of arbitrary code
Outline qoute I was about to put on a home page right after I discovered it and still had a hope that I will be that one who will finally destroy the world :: /quote Well i dont know if it will destroy the world, but sure enough it's enough to destory a small portion off it : Actually i found the...
SonicWALL SOHO3 6.3 - Content Blocking Script Injection
SonicWALL SOHO3 6.3 - Content Blocking Script Injection source: https://www.securityfocus.com/bid/4755/info The Sonicwall SOHO3 is an Internet security appliance that provides firewall security solutions. Reportedly, a vulnerability exists in the product that allows for a script injection attack ...
Re: IE allows universal Cross Site Scripting (TL#002)
Hello, This can also be exploited in IE5 and IE5.5 as well as IE6 by using a different resource file. Thor's demonstration is confined to IE6 because the resource he found to be exploitable first appeared in IE6 privacy policy. Proof of concept and HTML version:...
Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (2)
Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation 2 source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image...
Broker 5.9.5.0 Directory Traversal
Broker 5.9.5.0 Directory Traversal AFFECTED SYSTEMS Broker 5.9.5.0 DESCRIPTION Broker has the same .lnk upload vulnerability than the one I recently found in WFTPD, with : PUT local.lnk remote.lnk. We can create our own link, this way, we can traverse the homedirectory. It's even easier than the...
LPRng 3.6.x - Failure To Drop Supplementary Groups
/ source: https://www.securityfocus.com/bid/2865/info The LPRng software is an enhanced, extended, and portable implementation of the Berkeley LPR print spooler functionality. When the LPRng daemon is initialized, it fails to drop its supplementary groups. As a result, the daemon and any child...
Удаленный доступ через Acme (remote unauthorized access)
С помощью полного пути можно получить доступ к любым файлам с привилегией root...
CVE-2001-0109
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file...
Lotus Domino Server 5.0.x - Directory Traversal (1)
Lotus Domino Server 5.0.x - Directory Traversal 1 source: https://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with...
Lotus Domino Server 5.0.x - Directory Traversal (2)
source: https://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with the known filename, will display the contents of...
Дырка в Informix Webdriver
доступ к веб-интерфейсу управления базами данных без авторизации. Кроме того, уязвимость символьных линков при создании лог-файла...
mon_pine.sh
Hacksware Bug Report 1. Name: Pine temporary file hijacking vulnerability 2. Release Date: 2000.12.11 3. Affected Application: Pine Version 4.30or maybe other versions 4. Author: [email protected] 5. Type: Local Race Condition 6. Explanation If pine setting is like following: x...
webevent.txt
To whom it may concern, I found what seems to be a bug in a program called webevent www.webevent.com. Webevent is a calander program that allows multiple users to post to, and read the calander. The bug comes in from the fact that you still have access to the perl file that is run when the...
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)
// source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution for "/" and "". Unauthenticated users may access any known file in the...
CVE-2000-0607
Buffer overflow in fld program in Kanji on Console KON package on Linux may allow local users to gain root privileges via an input file containing long CHARSETREGISTRY or CHARSETENCODING settings...