251 matches found
Design/Logic Flaw
The Crowbar Ohai plugin chef/cookbooks/ohai/files/default/plugins/crowbar.rb in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names...
CVE-2012-3537
The Crowbar Ohai plugin chef/cookbooks/ohai/files/default/plugins/crowbar.rb in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names...
Apache Httpd < 2.2.23 : insecure LD_LIBRARY_PATH handling
Insecure handling of LDLIBRARYPATH was found that could lead to the current working directory to be searched for DSOs. This could allow a local user to execute code as root if an administrator runs apachectl from an untrusted directory...
DSA-2408-1 php5 - several
Bulletin has no description...
OpenSSH < 2.9.9 / 2.9p2 Symbolic Link 'cookies' File Removal
According to the banner, OpenSSH earlier than 2.9.9 / 2.9p2 is running on the remote host. Such versions contain an arbitrary file deletion vulnerability. Due to insecure handling of temporary files, a local attacker can cause sshd to delete any file it can access named 'cookies'. C Tenable, Inc...
PHPDirector 0.30 <= Insecure Cookie Handling Exploit
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Fonality trixbox CE 2.6.1 - 'langChoice' Local File Inclusion (Metasploit)
$Id: trixboxlangchoice.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mathematica Arbitrary File Overwriting Vulnerability (Linux)
The host is running Mathematica and is prone to arbitrary file overwriting vulnerability. OpenVAS Vulnerability Test $Id: secpodmathematicasymlinkvulnlin.nasl 5394 2017-02-22 09:22:42Z teissa $ Mathematica Arbitrary File Overwriting Vulnerability Linux Authors: Sooraj KS Copyright: Copyright c 20...
[RT-SA-2010-001] Geo++(R) GNCASTER: Insecure handling of long URLs
Advisory: Geo++R GNCASTER: Insecure handling of long URLs During a penetration test, RedTeam Pentesting discovered that the GNCASTER software does not handle long URLs correctly. An attacker can use this to crash the server software or potentially execute code on the server. Details =======...
Geo++(R) GNCASTER 1.4.0.7 Insecure Handling Of Long URLs
Advisory: Geo++R GNCASTER: Insecure handling of long URLs During a penetration test, RedTeam Pentesting discovered that the GNCASTER software does not handle long URLs correctly. An attacker can use this to crash the server software or potentially execute code on the server. Details =======...
Geo++(R) GNCASTER Insecure Handling Of NMEA-Data
Advisory: Geo++R GNCASTER: Insecure handling of NMEA-data During a penetration test, RedTeam Pentesting discovered that the GNCaster software does not handle NMEA-data correctly. An attacker that has valid login credentials can use this to crash the server software or potentially execute code on...
dB Masters Multimedia Insecure Cookie Handling Vulnerability
No description provided by source. ======================================================================================== | Title : dB Masters Multimedia Insecure Cookie Handling Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El...
Mlffat 2.1 (Auth Bypass / Cookie) SQL Injection Vulnerability
No description provided by source. || || | || o,7 || . o7 || q||| ow, : / / . MLFFAT 2.1 - insecure Cookie Handling Qabandi | iqaahotmail.fr From Kuwait, Peace. Salamz: Killer Hack, Ghost-R00t, Mr.Mn7os, all Muslims Buy: http://mlffat.com/emm/index.php?action=order Dork: "Powered by mlffat"...
MRCGIGUY Message Box 1.0 - Insecure Cookie Handling
MRCGIGUY Message Box 1.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability...
FreeBSD : cabextract -- insecure directory handling (61480a9a-22b2-11d9-814e-0001020eed82)
cabextract has insufficient checks for file names that contain ../. This can cause files to be extracted to the parent directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
Gobbl CMS 1.0 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ==================================================== Gobbl CMS 1.0 Insecure Cookie Handling Vulnerability ==================================================== --------------------------- Gobbl Cms 1.0 I.Cookie Hand...
Joomla: Session hijacking vulnerability, CVE-2008-4122
Joomla: Session hijacking vulnerability, CVE-2008-4122 References https://vulners.com/cve/CVE-2008-4122 http://int21.de/cve/CVE-2008-4122-joomla.html http://enablesecurity.com/2008/08/11/surf-jack-https-will-not-save-you/ https://www.defcon.org/html/defcon-16/dc-16-speakers.htmlPerry Description...
pdfjam -- insecure temporary files
Secunia reports: Some security issues have been reported in PDFjam, which can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issues are caused due to the "pdf90", "pdfjoin", and "pdfnup" scripts using temporary files in an insecure manner...
CVE-2008-3057
Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...