CVE-2011-3831

SQL injection vulnerability in incidentattachments.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name...

CVE-2011-4052

Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 aka Remove File operation for a file with a long name...

Tencent RTX upload arbitrary files and fixes-vulnerability warning-the black bar safety net

Install the RTX after the open IP:8 0 1 2 site Tencent RTX exist UserPhoto/photoUpload. php arbitrary file upload vulnerability Detailed description: Simple as a post form to upload $useraccount = $POST'useraccount'; $filename = $POST"filename"; $filedata = $POST"filedata"; Without any filtering...

JqueryUpload large file upload arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Guess the solutions to catalog, direct access to the default. aspx you may need to modify the parameter uploadid,the specific capture can be seen, can not make the undefined） 2. Test upload, the capture 3. Modify the Upload Directory can be arbitrarily specified 4. Guessing file name: the server...

Medium: puppet

Issue Overview: Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files. Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x...

DEBIAN-CVE-2011-3871

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files...

CVE-2011-3871

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files...

Code injection

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files...

CVE-2011-3871

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files...

CVE-2011-3871

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files...

Wind noise dotNETCMS 0day-vulnerability warning-the black bar safety net

Brief description: File upload Detailed description: Vulnerability in the user page, the registered user. Article management, upload of.. Select the file name unchanged.... Upload 1. asp;,jpg And then you know Vulnerability to prove: ! ! !...

CVE-2011-3871

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files...

CentOS Update for vsftpd CESA-2011:0337 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CiscoKits 1.0 TFTP Server DoS (write command)

Exploit for windows platform in category dos / poc !/usr/bin/python Title : CiscoKits CCNA TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.certificationkits.com/cisco-ccna-tftp-server/ Advisory :...

Ciscokits 1.0 TFTP Server File Name DoS

Exploit for windows platform in category dos / poc !/usr/bin/python Title: Ciscokits 1.0 TFTP Long Filename DoS Author: Craig Freyman @cd1zz Date: July 22, 2011 Software Link: http://www.certificationkits.com/tftpserver/tftpserver.zip Tested on: Windows XP SP3 Vendor notified: July 22, 2010 -...

Ciscokits 1.0 - TFTP Server File Name Denial of Service

Ciscokits 1.0 - TFTP Server File Name Denial of Service !/usr/bin/python Title: Ciscokits 1.0 TFTP Long Filename DoS Author: Craig Freyman @cd1zz Date: July 22, 2011 Software Link: http://www.certificationkits.com/tftpserver/tftpserver.zip Tested on: Windows XP SP3 Vendor notified: July 22, 2010 ...

CVE-2011-1705

Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url...

RHEL 6 : logrotate (RHSA-2011:0407)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:0407 advisory. The logrotate utility simplifies the administration of multiple log files, allowing the automatic rotation, compression, removal, and mailin...

RedHat Update for vsftpd RHSA-2011:0337-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

Exploit for windows platform in category remote exploits $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...