hcXSS.txt

In GOD We Trust Kachal667 Under9round Team KuT Hi, Here's myLrK new advisory about Hosting Controller. Hosting Controller - CSS vulnerabilities Found date : Pri8 Public Date: 02/11/2005 Summary ------- Hosting Controller is an all-in-one administrative hosting tool for Windows. It automates a wid...

Moderate: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...

Kuang2 the Virus

Kuang2 the Virus was found. SPDX-FileCopyrightText: 2000 Scott Adkins Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10132";...

Upside down world: back door Kill firewall&antivirus software(figure)-vulnerability warning-the black bar safety net

Often in the Get WebShell and elevation of Privilege, the server firewall or antivirus just to play a role, let's pass up the tools of the old disappear; or some firewall settings very BT, often causing a lot of inconvenience. Although some of the back door with cleanup antivirus and firewall...

Kuang2 the Virus

Kuang2 the Virus was found. Kuang2 the Virus is a program that infects all the executables on the system, as well as set up a server that allows the remote control of the computer. The client program allows files to be browsed, uploaded, downloaded, hidden, etc on the infected machine. The client...

YusASP Web Asset Manager Vulnerability

YusASP Web Asset Manager is a complete file manager for your website. If left uprotected, the YusASP allows you to anage the remote server SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

BEA WebLogic Management Servlet Multiple Vulnerabilities (BEA03-28)

BEA WebLogic is prone to multiple vulnerabilities in a management servlet. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-2660

apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via a symlink attack on atop.debug...

CVE-2005-2891

WebArchiveX.dll 5.5.0.76 (pre-Sept 6, 2005) exposes a scripting-unsafe default state that allows remote attackers to read or write arbitrary files via the MakeArchive and MakeArchiveStr methods. Affected component is WebArchiveX.dll; vulnerability arises because the component was marked safe for ...

HP-UX Ignite-UX TFTP Service Remote File Manipulation

The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes a world-writeable directory to anonymous TFTP access. A remote attacker could exploit this to upload arbitrary files. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com T...

CVE-2004-2319

IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 is affected. Two issues are described: (1) local users can create or overwrite files via the /001 log file to onedcu, and (2) local users can read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. Root cause details are not ...

CVE-2004-2319

IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...

Debian DSA-752-1 : gzip - several vulnerabilities

Two problems have been discovered in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems. - CAN-2005-0988 Imran Ghory discovered a race condition in the permissions setting code in gzip. When decompressing a file in a directory an...

CVE-2005-0360

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files...

CVE-2005-0360

The CVE-2005-0360 issue involves the Microsoft Log Sink Class ActiveX control in pkmcore.dll, which is marked as unsafe for scripting yet is labeled safe for scripting. The ActiveX control can create or append to arbitrary files on the local file system when exploited via Internet Explorer, enabl...

Microsoft Log Sink Class ActiveX control incorrectly marked "safe for scripting"

Overview The Microsoft Log Sink Class ActiveX control is incorrectly marked safe for scripting. This may allow a remote attacker to create or append to arbitrary files on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to create reusable software components...

RealPlayer / RealOne Player for Windows Multiple Vulnerabilities (2005-06-23)

According to its build number, the installed version of RealPlayer / RealOne Player for Windows has several vulnerabilities : - A malicious MP3 file can be used to overwrite an arbitrary file or execute an ActiveX control. - Using a specially crafted RealMedia file, an attacker may be able to cau...

GLSA-200505-17 : Qpopper: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-17 Qpopper: Multiple Vulnerabilities Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users CAN-2005-1151. The upstream developers discovered that Qpopper can be forced to creat...

CVE-2005-1751

Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759...

CVE-2005-1491

CVE-2005-1491 affects Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. The issue allows remote authenticated users to perform file operations: (1) move their home directory via viewaction.html and (2) move arbitrary files via the importaction.html importfile parameter. The root cause is a vul...