367 matches found
Linux Gather PPTP VPN chap-secrets Credentials
This module collects PPTP VPN information such as client, server, password, and IP from your target server's chap-secrets file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Gather PPTP...
CVE-2012-2225
360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...
Design/Logic Flaw
360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...
CVE-2012-2225
CVE-2012-2225 affects 360zip 1.93beta. The vulnerability allows remote code execution via vectors related to file browsing and file extraction. Root cause details are not fully specified in the provided documents, and there is no explicit exploit description or affected versions beyond 1.93beta. ...
CVE-2012-2225
360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...
NeoAxis Web Player Zip File Directory Traversal Vulnerability
NeoAxis Web Player is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Explzh may insecurely load executable files
Overview Explzh may use unsafe methods for determining how to load executables .exe. Explzh is a file compression/extraction software supporting multiple file formats. Explzh loads certain executables .exe when extracting files. Explzh contains an issue with the file search path, which may...
XacRett may insecurely load executable files
Overview XacRett may use unsafe methods for determining how to load executables .exe. XacRett is a file extraction software that supports many file formats. XacRett loads certain executables .exe when extracting files. XacRett contains an issue with the file search path, which may insecurely load...
JVN#85599999: Explzh may insecurely load executable files
Explzh is a file compression/extraction software supporting multiple file formats. Explzh loads certain executables .exe when extracting files. Explzh contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privile...
JVN#68536660: Archive Decoder may insecurely load executable files
Archive Decoder is a file extraction software that supports multiple file formats. Archive Decoder loads certain executables .exe when extracting files. Archive Decoder contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary cod...
JVN#88850043: Lhasa may insecurely load executable files
Lhasa is a file extraction software that supports LZH and ZIP formats. Lhasa loads certain executables .exe when extracting files. Lhasa contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privilege of running...
[SECURITY] Fedora 12 Update: cabextract-1.3-1.fc12
cabextract is a program which can extract files from cabinet .cab archives...
fastjar archiver directory traversal
Directory traversal during file extraction...
[SECURITY] Fedora 11 Update: chmsee-1.0.1-16.fc11
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
GNU Tar and GNU Cpio heap-based buffer overflow vulnerability
Exploit for unknown platform in category local exploits ============================================================= GNU Tar and GNU Cpio heap-based buffer overflow vulnerability ============================================================= I. BACKGROUND GNU Tar and GNU Cpio are popular programs...
Cpanel Bypass Safe mode [ extract tar.gz by Cpanel ]
==================================================== Cpanel Bypass Safe mode extract tar.gz by Cpanel ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / ...
[SECURITY] Fedora 11 Update: chmsee-1.0.1-14.fc11
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
[SECURITY] Fedora 11 Update: chmsee-1.0.1-11.fc11
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier
First after logging onto the console either pnlog mailto, or pnlog scpto will send the logs off of the box to a destination you specify, you can also display the logs using pnlog show. pnadmin$ pnlog scpto [email protected]:/home/ryan scp /tmp/error-logs.tar.gz...
[SECURITY] Fedora 11 Update: chmsee-1.0.1-9.fc11
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...