477 matches found
mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2014-15 Miscellaneous memory safety hazards rv:28.0 / rv:24.4 MFSA 2014-16 Files extracted during updates are not always read only MFSA 2014-17 Out of bounds read during WAV file decoding MFSA 2014-18 crypto.generateCRMFRequest does not validate type of key MFSA...
MGASA-2014-0090 Updated libtar package fixes security vulnerability
A directory traversal attack was reported against libtar, a C library for manipulating tar archives. The application does not validate the filenames inside the tar archive, allowing to extract files in arbitrary path. An attacker can craft a tar file to override files beyond the tarextractglob an...
CentOS 4 : unzip (CESA-2007:0203)
Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...
[NetworkMiner v1.4.1] Network Forensic Analysis Tool (NFAT)
NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...
ChillyCMS 1.3.0 - Multiple Vulnerabilities
ChillyCMS 1.3.0 - Multiple Vulnerabilities Exploit Title: chillyCMS 1.3.0 Multiple Vulnerabilities Google Dork: "powered by chillyCMS" Date: 15 February 2013 Exploit Author: Abhi M Balakrishnan Vendor Homepage: http://chillycms.bplaced.net/ Software Link:...
Linux Gather PPTP VPN chap-secrets Credentials
This module collects PPTP VPN information such as client, server, password, and IP from your target server's chap-secrets file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Gather PPTP...
CVE-2012-2225
360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...
Design/Logic Flaw
360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...
CVE-2012-2225
CVE-2012-2225 affects 360zip 1.93beta. The vulnerability allows remote code execution via vectors related to file browsing and file extraction. Root cause details are not fully specified in the provided documents, and there is no explicit exploit description or affected versions beyond 1.93beta. ...
CVE-2012-2225
360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...
PT-2012-3892
Name of the Vulnerable Software and Affected Versions 360zip version 1.93beta Description The issue allows remote attackers to execute arbitrary code. This is related to file browsing and file extraction. Recommendations For version 1.93beta, at the moment, there is no information about a newer...
CVE-2012-2225: Undefined Security Weakness
360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...
NeoAxis Web Player Zip File Directory Traversal Vulnerability
NeoAxis Web Player is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Explzh may insecurely load executable files
Overview Explzh may use unsafe methods for determining how to load executables .exe. Explzh is a file compression/extraction software supporting multiple file formats. Explzh loads certain executables .exe when extracting files. Explzh contains an issue with the file search path, which may...
XacRett may insecurely load executable files
Overview XacRett may use unsafe methods for determining how to load executables .exe. XacRett is a file extraction software that supports many file formats. XacRett loads certain executables .exe when extracting files. XacRett contains an issue with the file search path, which may insecurely load...
JVN#68536660: Archive Decoder may insecurely load executable files
Archive Decoder is a file extraction software that supports multiple file formats. Archive Decoder loads certain executables .exe when extracting files. Archive Decoder contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary cod...
JVN#85599999: Explzh may insecurely load executable files
Explzh is a file compression/extraction software supporting multiple file formats. Explzh loads certain executables .exe when extracting files. Explzh contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privile...
JVN#88850043: Lhasa may insecurely load executable files
Lhasa is a file extraction software that supports LZH and ZIP formats. Lhasa loads certain executables .exe when extracting files. Lhasa contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privilege of running...
