412 matches found
Samba Symlink Traversal Arbitrary File Access (unsafe check)
The remote Samba server is configured insecurely and allows a remote attacker to gain read or possibly write access to arbitrary files on the affected host. Specifically, if an attacker has a valid Samba account for a share that is writable or there is a writable share that is configured to be a...
Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability
No description provided by source. ============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...
Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ============================================================== Geeklog = 1.6.0sr1 Remote Arbitrary File Upload Vulnerability ==============================================================...
Geeklog 1.6.0sr1 - Arbitrary File Upload
============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...
Geeklog 1.6.0sr1 File Upload
============================================================================== Geeklog with the URL of the Geeklog site. Opens an interactive browser session where you can create directories and upload files. This also exposes all the files in the images/Library/File|Image|Media|Flash directories...
Geeklog <- 1.6.0sr1 - Remote Arbitrary File Upload
============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...
CVE-2007-6722
Vidalia bundle before 0.1.2.18, when running on Windows and Mac OS X, installs Privoxy with a configuration file config.txt or config that contains insecure 1 enable-remote-toggle and 2 enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify...
Rittal CMC-TC Processing Unit II XSS / Command Execution
Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC Processing Unit II multiple vulnerabilities Release Date: 2009-03-23 Last Modified: 2009-03-22 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: Rittal CMC-TC PU II Web management Devices: CMC-TC PU II D...
Rittal CMC-TC Processing Unit II Multiple Vulnerabilities
Exploit for hardware platform in category remote exploits ========================================================= Rittal CMC-TC Processing Unit II Multiple Vulnerabilities ========================================================= Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC...
HP Linux Imaging and Printing System Security Bypass Vulnerability
HP Linux Imaging and Printing System is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-900-3)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 900-2 (fetchmail)
The remote host is missing an update to fetchmail announced via advisory DSA 900-2. Due to restrictive dependency definition the updated fetchmailconf package couldn SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
Debian Security Advisory DSA 900-3 (fetchmail)
The remote host is missing an update to fetchmail announced via advisory DSA 900-3. Due to restrictive dependency definition for fetchmail-ssl the updated fetchmailconf package couldn't be installed on the old stable distribution woody together with fetchmail-ssl. Hence, this update loosens it, s...
CVE-2007-1741
Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...
Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit
Exploit for unknown platform in category remote exploits ========================================================= Microsoft DNS Server Dynamic DNS Updates Remote Exploit ========================================================= / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres...
CVE-2006-7141
Absolute path traversal vulnerability in Oracle Database Server, when utlfiledir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utlfile functions such as 1 utlfile.putline...
Check Point VPN-1 SecureClient 4.0 < 4.1 - Policy Bypass
source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on affected computers. This issue allows remote VPN users to...
DSA-900-3 fetchmail - programming error
Bulletin has no description...
IlohaMail Insecure Configuration Files
------------------------------------------------ Advisory Name : IlohaMail Insecure Configuration Files Release Date : 10 January, 2004 Application : IlohaMail http://ilohamail.org/ Vulnerable: IlohaMail-0.8.14-rc1 and lower Not Vulnerable: IlohaMail-0.8.14-rc2 Author : SRR Project Group of Ready...
Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration
source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base community strings, even read/write strings may be disclosed to a remote...