Directory traversal

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

avast! AntiVirus Multiple BOF Vulnerabilities (Linux)

The host is installed with avast! AntiVirus and is prone to multiple Buffer Overflow Vulnerabilities. OpenVAS Vulnerability Test $Id: gbavastavmultbofvulnlin.nasl 4865 2016-12-28 16:16:43Z teissa $ avast! AntiVirus Multiple BOF Vulnerabilities Linux Authors: Nikita MR Copyright: Copyright c 2009...

avast! AntiVirus <= 1.0.8-2 Multiple BOF Vulnerabilities - Linux

avast! AntiVirus is prone to multiple buffer overflow BOF vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

EasyVillaRentalSite - 'id' SQL Injection

======================================================== == EasyVillaRentalSite id Remote SQL Injection Vulnerability ======================================================== == AuThOr : BazOka-HaCkEr == EmaiL : [email protected] == HomE : www.TrYaG.cc/cc...

Stack overflow

Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service application crash or execute arbitrary code via a malformed 1 ISO or 2 RPM file...

CVE-2009-2219

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

CVE-2009-2219

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

CVE-2009-2219

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

cscope: multiple buffer overflows

Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via multiple vectors including 1 a long pathname that is not properly handled during file list parsing, 2 long pathnames that result from path...

ArcaVir AntiVirus Products Privilege Escalation Vulnerability

This host is running ArcaVir AntiVirus Products and is prone to Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbarcaviravprdtsprivescvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ ArcaVir AntiVirus Products Privilege Escalation Vulnerability Authors: Sujit Ghosal Copyright:...

ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ArcaBit Sp. z o.o. - http://www.arcabit.com/ | // // | | // // | Affected Software: | // // | ArcaVir 2009...

2daybiz Template Monster Clone (edituser.php) Change Pass Exploit

Exploit for unknown platform in category web applications ================================================================= 2daybiz Template Monster Clone edituser.php Change Pass Exploit ================================================================= Template Monster Clone Change Password...

CIOs on mobile security: Choosing a platform

At a Churchill Club event in Santa Clara, Calif., Peter Solvik, managing director at Sigma Partners, talks to a panel of CIOs about how they’re making mobile devices more secure in the enterprise and whether their employees prefer the BlackBerry over the iPhone. The panel includes: Matt Carey,...

Insufficient Authentication vulnerability in Acer notebooks

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Authentication уязвимости в ноутбуках Acer. Уязвимость я обнаружил 28.04.2009 на двух моих ноутбуках. На данных ноутбуках используется Windows XP Home Rus, в случае других ОС уязвимость также может присутствовать. В Windows XP Home в...

GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl theroadoutsidemyhouseispavedwithgoodintentions.pl AKA GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit BY Jeremy Brown [email protected] 05.07.2009 It seems I couldn't gather my resources quickly enough before the first exploit came out...

Grabit 1.7.2x Buffer Overflow

!/usr/bin/perl theroadoutsidemyhouseispavedwithgoodintentions.pl AKA GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit BY Jeremy Brown [email protected] 05.07.2009 It seems I couldn't gather my resources quickly enough before the first exploit came out.. and it came as no surprise that i...

OpenJDK allows to list files within the user home directory (6484091)

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors...

GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit ======================================================= !/usr/bin/perl theroadoutsidemyhouseispavedwithgoodintentions.pl AKA Grab...