158 matches found
The vulnerability of the DLL-file loading mechanism of the cryptographic protection tool ViPNet Client, which allows a hacker to execute arbitrary code with administrator privileges.
The vulnerability of the DLL file loading mechanism of the ViPNet Client encryption protection tool is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code with administrator privileges using a specially crafted DLL file placed in t...
Gemalto SafeNet Authentication Service Windows Logon Agent Elevation of Privilege Vulnerability
Gemalto SafeNet Authentication Service Windows Logon Agent is a SafeNet Authentication Service Windows Logon Agent from Gemalto USA. A security vulnerability exists in the Gemalto SafeNet Authentication Service Windows Logon Agent that stems from the program's use of weak access control lists for...
CVE-2015-7961
SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...
Mozilla Firefox File Loading Vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Thunderbird is a mail tool adapted from the mail widget of the Mozilla browser. Mozilla Firefox suffers from a file loading vulnerability where a non-existent chrome.manifest file will attempt to be load...
UBUNTU-CVE-2017-5427
A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in...
Creative X-Cart Cross-Site Scripting Vulnerability
Creative X-Cart is a Russian company Creative open source PHP e-commerce software . The software provides favorites , order records and inventory management modules. A cross-site scripting vulnerability exists in Creative X-Cart 4.5.0 and earlier versions. A remote attacker can exploit this...
X-Cart 4.5.0 Cross Site Scripting
Exploit Title: X-Cart Cross Site Scripting Date: 30/06/2015 Exploit Author: nopesled Vendor Homepage: http://www.x-cart.com/ Version: 4.5.0 and possibly earlier Details ------- Websites running X-Cart version 4.5.0 and possibly below which have not removed their /install/ directory are vulnerable...
Completely remove WSUS 3.0 approach-vulnerability warning-the black bar safety net
Upgrade the domain controller or demote a domain controller, wsus services usually fail, only by hand to completely remove wsus3. 0 and then re-install, the following is the result of several attempts later summed up the detailed operation of the steps of: 1, the...
HP OpenView Client Configuration Manager Radia Notify Code Execution (CVE-2006-5782)
An authentication weakness vulnerability exists in the Radia Notify Daemon component of HP OpenView Client Configuration Manager. The flaw is created by improper handling of user supplied data passed to the affected Radia Notify Daemon on TCP port 3465. By sending a crafted message, the attacker...
Design/Logic Flaw
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse...
CVE-2008-2287
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse...
CVE-2008-2287
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse...
UseBB 1.0.x Cross Site Scripting (XSS)
Script...............: UseBB version: 1.0.7 Script Site..........: http://www.usebb.net Vulnerability........: Cross Site Scripting XSS Acces................: Remote level................: Dangerous Author...............: S4mi Contact..............: s4miatLinuxMail.org The affected Files :...
PT-2007-1711 · Cs Cart · Cs-Cart
Name of the Vulnerable Software and Affected Versions: CS-Cart version 1.3.3 Description: A remote file inclusion issue in the install.php file allows remote attackers to execute arbitrary PHP code via a URL in the install dir parameter. Recommendations: For CS-Cart version 1.3.3, as a temporary...
Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit
No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board = 2.0b1 chat/login.php Remote Code Execution Vulnerability...
linpha_10_local.txt
------------- Linpha = 1.0 multiple arbitrary local inclusion ----------------- software: site: http://linpha.sourceforge.net/nuke/ description: " LinPHA is an easy to use, multilingual, flexible photo / image archive / album / gallery written in PHP. It uses a SQL database to store information...
32919 - Computer Associates Message Queuing (CAM/CAFT) multiple vulnerabilities
Title: 32919 - Computer Associates Message Queuing CAM/CAFT multiple vulnerabilities CA Vulnerability ID: CAID 32919 Disclosure Date: 2005-08-19 Discovered By: CA internal audit Impact: Remote attackers can execute arbitrary code, or cause a denial of service condition. Summary: During a recent...
