713 matches found
SetCMS 3.6.5 - Remote Command Execution
!/usr/bin/perl SetCMS v3.6.5 setcms.org remote commands execution exploit by RST/GHC o4.o9.2oo6 coded by 1dt.w0lf THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE про багу: file: functions.php FUNCTION ip global $userid; ifgetenv'HTTPCLIENTIP' $userip = getenv'HTTPCLIENTIP';...
Debian Security Advisory DSA 499-2 (rsync)
The remote host is missing an update to rsync announced via advisory DSA 499-2. OpenVAS Vulnerability Test $Id: deb4992.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 499-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Across the FSO WSH write file-vulnerability warning-the black bar safety net
Now the code also"upgrade"it,in order to achieve a file is written,because for the disabled FSO,WSH host to write the file is indeed a difficult thing. You might ask the shell object has the write file function? Indeed in the MSDN and there is no description,however, the shell object can already...
CVE-2007-2438
The sandbox for vim allows dangerous functions such as 1 writefile, 2 feedkeys, and 3 system, which might allow user-assisted attackers to execute shell commands and write files via modelines...
CVE-2007-2438
The sandbox for vim allows dangerous functions such as 1 writefile, 2 feedkeys, and 3 system, which might allow user-assisted attackers to execute shell commands and write files via modelines...
getID3 < 1.7.8-b1 Multiple Remote Vulnerabilities
getID3, a web-based tool for extracting information from MP3 files, is installed on the remote web server. The installation of getID3 includes a set of demo scripts that allow an unauthenticated, remote attacker to read and delete arbitrary files, write files with some restrictions, and execute...
Oracle 9i10g - utl_file FileSystem Access
Oracle 9i10g - utlfile FileSystem Access -- -- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package...
Microsoft RIS Server weak permissions
It's possible to write files via TFTP...
Net-SNMP SNMPD.Conf Tokens安全限制绕过漏洞
Net-SNMP是一款开放源代码的SNMP协议实现。 Net-SNMP存在安全限制绕过问题，远程攻击者可以利用漏洞写文件到未授权位置并执行。 要利用此漏洞，攻击者必须获得只读用户的权限或SNMP公共字符串。目前没有详细漏洞细节提供。 0 Net-SNMP Net-SNMP 5.3 Net-SNMP Net-SNMP 5.3 Net-SNMP net-snmp-5.3.1.tar.gz a href="http://downloads.sourceforge.net/net-snmp/net-snmp-5.3.1.tar.gz"...
CVE-2006-2958
Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. dot dot in a 1 .rar, 2 .tar, 3 .jar, or 4 .gz file. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-2101
The provided CVE-2006-2101 entry describes a directory traversal vulnerability in WinISO 5.3. The flaw allows an attacker to write arbitrary files by using a .. sequence in a filename inside an ISO image, enabling remote file writes. The relation to other connected documents does not add addition...
CVE-2006-2100
The CVE-2006-2100 entry describes a directory traversal vulnerability in Magic ISO 5.0 Build 0166. Affected component: Magic ISO’s ISO image handling. Root cause: remote attackers can exploit a .. (dot dot) in a filename within an ISO image to write arbitrary files on the system. Impact per provi...
xosx-passwd.pl.txt
Original reference: http://fakehalo.us/xosx-passwd.pl --------------------------------------------------------------------- !/usr/bin/perl /usr/bin/passwdOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Apple OSX's /usr/bin/passwd program has support for a custom passwd fil...
Oracle Reports arbitrary file writing vulnerability
Overview Oracle Reports fails to validate URI parameters, possibly allowing a remote attacker to overwrite arbitrary files on the Reports Server. Description Oracle Reports is an enterprise reporting tool that extracts data from multiple sources and inserts it into a formatted report. It is a...
4D WebStar Symbolic Link Vulnerability
The remote server is running 4D WebStar FTP Server. 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Successful...
CVE-2005-2384
CVE-2005-2384 describes a directory traversal in a third‑party compression library (UNACEV2.DLL) used by Avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460. The vulnerability allows a remote attacker to write arbitrary files by supplying an ACE archive with filenames co...
DSA-756-1 squirrelmail - several
Bulletin has no description...
Mandrake Linux Security Advisory : rsh (MDKSA-2005:100)
A vulnerability in the rcp protocol was discovered that allows a server to instruct a client to write arbitrary files outside of the current directory, which could potentially be a security concern if a user used rcp to copy files from a malicious server. The updated packages have been patched to...
SquirrelMail < 1.45 Multiple Vulnerabilities
According to its banner, the version of SquirrelMail installed on the remote host is prone to multiple flaws : - Post Variable Handling Vulnerabilities Using specially crafted POST requests, an attacker may be able to set random variables in the file 'optionsidentities.php', which could lead to...