The system paths are to be locked down to the JIRA Home directory

Currently JIRA allows you to change system file paths at runtime. While convenient, this allowed an attacker to elevate his/her stolen system admin access into a situation where he/her can execute arbitrary code. A decision has been made to remove the ability to set the paths at run time. For new...

List Files with setuid-bit in / and /home, Check /tmp for sticky-bit

This plugin uses ssh to List Files with setuid-bit in / and /home, Check /tmp for sticky-bit. OpenVAS Vulnerability Test $Id: GSHBSSHsetuid.nasl 7076 2017-09-07 11:53:47Z teissa $ List Files with setuid-bit in / and /home, Check /tmp for sticky-bit Authors: Thomas Rotter Copyright: Copyright c 20...

Powered by iNetScripts - Arbitrary File Upload

Powered by iNetScripts - Arbitrary File Upload ==================================================== Powered by iNetScripts: Shell Upload Vulnerability ==================================================== Contact :Sec-q8 [email protected] Published: 2010-04-25 Home : http://Sec-Senter.com/vb...

CVE-2010-1425

Summary: CVE-2010-1425 affects F-Secure and related antivirus products, whose scanning engines fail to detect malware in specially crafted 7Z, GZIP, CAB, and RAR archives. The issue enables remote malware delivery by archive content evasion, impacting several F-Secure offerings (including Interne...

Another Small Town Loses $100K to Hackers

A rash of home foreclosures and abandoned dwellings had already taken its toll on the tax revenue for the Village of Summit, a town of 10,000 just outside Chicago. Then, in March, computer crooks broke into the town’s online bank account, making off with nearly $100,000. Read the full article...

Joomla! Component com_wisroyq 1.1 - Local File Inclusion

Joomla! Component comwisroyq 1.1 - Local File Inclusion ============================================================================================================================ o Joomla Component WISro Yahoo Quotes Local File Inclusion Vulnerability Software : comwisroyq version 1.1.x...

ASX To MP3 Converter 3.0.0.100 Stack Overflow

!/usr/bin/python import time ASX to MP3 Converter Version 3.0.0.100 = Local stack overflow exploit Author: Hazem Mofeed PoC: http://www.exploit-db.com/exploits/11930 Tested On: Windows Xp Home Edition SP3 Home: http://hakxer.wordpress.com print ' Exploited by Hazem Mofeed \n' print ' ASX to MP3...

Fa Home Bypass / Shell Upload

======================================================================================== | Title : Fa Home Auth Bypass Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/FaHome.NulL.bY.Eh3an.FaScript.Product.zip ...

CVE-2010-0509

SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts...

Fa Home - Authentication Bypass

Fa Home - Authentication Bypass ======================================================================================== | Title : Fa Home Auth Bypass Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Tested on: windows SP2 Français V.Pn...

Fa Home - Authentication Bypass

======================================================================================== | Title : Fa Home Auth Bypass Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4...

Fa Home (Auth Bypass) Vulnerability

Exploit for php platform in category web applications =================================== Fa Home Auth Bypass Vulnerability =================================== ======================================================================================== | Title : Fa Home Auth Bypass Vulnerability |...

Windows XP Home Edition SP3 English calc.exe 37 bytes

Windows XP Home Edition SP3 English calc.exe 37 bytes. Shellcode exploit for win32 platform / Windows Xp Home edition SP3 english calc.exe 37 bytes shellcode by: Hazem mofeed The Shellcode: http://www.exploit-db.com/exploits/11598 Modified to working In SP3, Home: www.pentestlabs.com greetz:...

Windows Xp Home Edition SP2 English ( calc.exe ) 37 bytes

No description provided by source. / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil = "\xeb\x16\x5b\x31\xc0\x50\x53\xbb\x8d\x15\x86\x7c\xff\xd3\x31\xc0"...

Windows Xp Home Edition SP2 English calc.exe 37 bytes

Windows Xp Home Edition SP2 English calc.exe 37 bytes. Shellcode exploit for win32 platform / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil =...

DEBIAN-CVE-2010-0426

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...

trixbox maint Web Interface Default Credentials

The remote web server hosts the web interface for trixbox or Asterisk@Home, as it was formerly known, a PBX application based on Asterisk. The remote installation of this web interface has at least one account configured using default credentials. With this information, an attacker can gain...

trixbox Cisco Phone Services PhoneDirectory.php ID Parameter SQL Injection

The version of the Cisco Phone Services phone directory script 'cisco/services/PhoneDirectory.php' installed as part of the web interface for trixbox or Asterisk@Home, as it was formerly known and hosted on the remote web server fails to sanitize input to the 'ID' parameter before using it in a...

[SECURITY] Fedora 11 Update: chmsee-1.0.1-15.fc11

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

HASHE! Solutions - Multiple SQL Injections

HASHE! Multiple Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : HASHE .:. Bug Type : Sql InjectionMysql .:. Dork : 1 "Powered By HASHE" 2...