Directory traversal

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

DEBIAN-CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...

SAP Player 0.9 (.m3u) Universal Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/perl print qq Iranian Pentesters Home Www.Pentesters.Ir PLATEN - H.jafari - SAP player 0.9 .m3u Universal Local BoF ExploitSEH http://www.sorinara.com/sap/sap09.exe bug found & exploited by: PLATEN E-mail && blog: hjafari.blogspot.com...

Xstate Real Estate 1.0 - Blind SQL Injection Cross-Site Scripting

Xstate Real Estate 1.0 - Blind SQL Injection Cross-Site Scripting / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Xstate Real Estate 1.0 bSQL/XSS Multiples Vulnerability Discovered By :...

Microsoft Windows Embedded OpenType Font Engine Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that may affect the Embedded OpenType font engine. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will completely compromise affected computers...

Directory traversal

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

avast! AntiVirus Multiple BOF Vulnerabilities (Linux)

The host is installed with avast! AntiVirus and is prone to multiple Buffer Overflow Vulnerabilities. OpenVAS Vulnerability Test $Id: gbavastavmultbofvulnlin.nasl 4865 2016-12-28 16:16:43Z teissa $ avast! AntiVirus Multiple BOF Vulnerabilities Linux Authors: Nikita MR Copyright: Copyright c 2009...

avast! AntiVirus <= 1.0.8-2 Multiple BOF Vulnerabilities - Linux

avast! AntiVirus is prone to multiple buffer overflow BOF vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

EasyVillaRentalSite - 'id' SQL Injection

======================================================== == EasyVillaRentalSite id Remote SQL Injection Vulnerability ======================================================== == AuThOr : BazOka-HaCkEr == EmaiL : [email protected] == HomE : www.TrYaG.cc/cc...

Stack overflow

Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service application crash or execute arbitrary code via a malformed 1 ISO or 2 RPM file...

CVE-2009-2219

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

CVE-2009-2219

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

CVE-2009-2219

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

cscope: multiple buffer overflows

Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via multiple vectors including 1 a long pathname that is not properly handled during file list parsing, 2 long pathnames that result from path...

ArcaVir AntiVirus Products Privilege Escalation Vulnerability

This host is running ArcaVir AntiVirus Products and is prone to Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbarcaviravprdtsprivescvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ ArcaVir AntiVirus Products Privilege Escalation Vulnerability Authors: Sujit Ghosal Copyright:...