WinTFTP Server Pro 3.1 Directory Traversal

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,tftp Transfers files to and from a remote computer running the TFTP service. TFTP -i host GET | PUT source destination -i Specifies binary image transfer mode also called octet. In binary image mode the file is moved...

HP Virtual Server Environment / HP Virtual Connect Enterprise Manager unauthorized files access

No description provided...

HP Palm WebOS multiple security vulnerabilities

Code execution, files access...

Design/Logic Flaw

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors...

CVE-2009-4878

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors...

CVE-2010-1502

Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to "developer tools."...

CVE-2010-1502

CVE-2010-1502 affects Google Chrome versions prior to 4.1.249.1059. The description indicates an unspecified vulnerability that allows remote attackers to access local files via vectors related to the browser’s developer tools. The CVSS base score is high (9.3). Affected product: Google Chrome be...

TANDBERG Video Communication Server multiple security vulnerabilities

Static ssh key, authentication bypass, files access...

MediaInSpot CMS Local File Inclusion

Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT : ../../../../../../../etc/passwd Example :...

puppet privilege escalation

Elevated privileges are not dropped on files access, symbolic links vulnerability...

TVUPlayer ActiveX code execution

Insecure method allows local files access...

WebKit / Apple Safari multiple security vulnerabilities

Multiple memory corruptions, local files access...

Windows print spooler multiple security vulnerabilities

Buffer overflow, unauthorized files access, privilege escalation with dynamic library loading...

[Full-disclosure] CORE-2008-0826 - Internet Explorer Security Zone restrictions bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Security Zone restrictions bypass 1. Advisory Information Title: Internet Explorer Security Zone restrictions bypass Advisory ID: CORE-2008-0826...

CVE-2009-1556

img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the nextfile parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerabili...

[DSECRG-09-036] Chance-i Techno Vision Security System - Directory Traversal File Download

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

JBoss EAP unprivileged local xml file access

The request handler in JBossWS in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read...

Openfire < 3.6.3 Multiple Vulnerabilities

Binary data 4925.prm...

Axis 70U Network Document Server multiple security vulnerabilities

Privilege escalation, unauthorized files acccess, crossite scripting...

CVE-2008-5549

Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."...