7915 matches found
MySQL FILE privilege elevation
Added: 12/21/2012 CVE: CVE-2012-5613 BID: 56771 OSVDB: 88118 Background MySQL is an open-source database software package available for multiple platforms. Problem A database user who has FILE permission can write arbitrary files to the file system, leading to privilege elevation. Resolution Revo...
MarkAny Content SAFER ActiveX Arbitrary Download and Execution
The remote host has the MarkAny Content SAFER ActiveX control installed, which is distributed with Samsung KIES. It is affected by an arbitrary file write vulnerability that is triggered during the parsing of a method call. This may allow attackers to overwrite or download arbitrary files. C...
Novell NetIQ Privileged User Manager 2.3.1 auth.dll Code Execution
Novell NetIQ Privileged User Manager version 2.3.1 suffers from a remote code execution vulnerability in pamodifyaccounts in auth.dll. The secure web interface contains a flaw which allows, without prior authentication, to change the password of the user 'admin'. A remote attacker then could logi...
Chromium: Multiple vulnerabilities
Background Chromium is an open source web browser project. Description Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact A remote attacker could entice a user to open a specially crafted web site usi...
phpcms v9. 1. 1 5 sql and XSS exploits-vulnerability warning-the black bar safety net
phpcms v9. 1. 1 5 The official demo site has been updated to 9.1.16: the http://v9.demo.phpcms.cn/ XSS public function publicgetsuggestkeyword $url = $GET'url'.'& q='.$ GET'q'; echo $url; $res = @filegetcontents$url; ifCHARSET != 'gbk' $res = iconv'gbk', CHARSET, $res; echo $res; Use method:...
CVE-2012-5376
Removed by vendor...
Stable Channel Update for Chrome OS
The Stable channel has been updated to 21.0.1180.92 Platform version: 2465.211.0 for Chrome OS Chromebooks Acer AC700, Samsung Series 5, Samsung Series 5 550 and Cr-48, and Samsung Chromebox Series 3. Machines will be receiving updates over the next several days. This build contains security and...
Stable Channel Update
The Stable channel has been updated to 22.0.1229.94 for Windows, Mac, and Linux. This release contains fixes for the security issue listed below. Security fixes and rewards: Congratulations to Pinkie Pie, returning to the fray with another beautiful piece of work! We're delighted at the success o...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 154983154987 Critical CVE-2012-5112: SVG use-after-free and IPC arbitrary file write. Credit to Pinkie Pie...
Mandrake Linux Security Advisory : mc (MDKSA-2000:078)
A problem was found in the cons.saver program by Maurycy Prodeus. The cons.saver program is a screensaver for the console that is included in the mc package. cons.saver does not check if it is started with a valid stdout, which combined with a bug in its check to see if its argument is a tty it...
Generic HTTP Directory Traversal Utility
This module allows you to test if a web server or web application is vulnerable to directory traversal with three different actions. The 'CHECK' action default is used to automatically or manually find if directory traversal exists in the web server, and then return the path that triggers the...
MobileCarty 1.0 Shell Upload / File Write
Exploit Title: MobileCartly 1.0 Multiple Vulnerabilities Date: 11/08/2012 Author: L0n3ly-H34rT Homepage: http://se3c.tk/ Contact: [email protected] Software Link : http://mobilecartly.com/mobilecartly.zip Tested on: Linux/Windows Remote File Upload : just upload shell.php here :...
MobileCartly 1.0 - Arbitrary File Write
----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- MobileCartly 1.0 Arbitrary File Write Vulnerability Bug discovered by Yakir Wizman AKA...
MobileCartly 1.0 - Arbitrary File Write
MobileCartly 1.0 - Arbitrary File Write ----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- MobileCartly 1.0 Arbitrary File Write Vulnerability Bug...
NetDecision 4.2 TFTP Writable Directory Traversal Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "NetDecision 4.2...
Oracle BTM Server 12.1.0.2.7 Remote Code Execution
Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message Remote Code Execution Exploit tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version files...
Oracle Business Transaction Management Server 12.1.0.2.7 - FlashTunnelService WriteToFile Message Remote Code Execution
Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message Remote Code Execution Exploit tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version files...
Scientific Linux Security Update : tar on SL5.x, SL4.x i386/x86_64
A path traversal flaw was discovered in the way GNU tar extracted archives. A malicious user could create a tar archive that could write to arbitrary files to which the user running GNU tar had write access. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text i...
HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PMParamHandler component of Performance Manager, which is served v...
