32 matches found
CVE-2020-11613
Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. By default, the Authenticated Users group has Modify permissions to the installation folder. Because of this, any user on the system can...
Valve Steam Privilege Acquisition Vulnerability
Valve Steam is a Linux-based operating system for living room gaming from the American company Valve. A security vulnerability exists in Valve Steam version 2.10.91.91, which originates when the program assigns weak permissions user: read/write to the Install folder. This vulnerability can be...
CVE-2015-7985
Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...
CVE-2015-7985
Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...
CVE-2015-7985
Valve Steam 2.10.91.91 has weak permissions on the Install folder (Users: read/write), enabling local privilege escalation via a trojan steam.exe. Affected component: Steam Install directory; root cause: improper file permissions. Impact: local privilege gain; exploitation details or in-wild stat...
Dedecms through the kill reload exploit apache to parse+variable coverage-vulnerability warning-the black bar safety net
The use of the conditional is the webserver requirement is the presence of the apache parsing vulnerability and the install folder exists. The use of screenshots: ! 2013060607070546554 Dedecms after the installation will put the installation files in/install/index. php backup into...
A lot of the rebate built Station system V8 installation vulnerability-vulnerability warning-the black bar safety net
Brief description of the A lot of the rebate built Station system after installing the site, will put the install folder of the install. php renamed the install. php. lock, but in this file we can access to, so use the capture tool, you can reinstall the site. The use of Description 1, FireFox to...
Remote file inclusion
PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter. NOTE: the installation instructions specify deleting the install/ folder...
Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit
No description provided by source. ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 = add admin" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: ArxWolf Discovered On: 16 05 2008 WWW: http://WebXakep.net ICQ...
Zomplog 3.8.2 - newuser.php Arbitrary Add Admin
Zomplog 3.8.2 - newuser.php Arbitrary Add Admin ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 ДобавлÑем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" ПовторÑем пароль...
Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit
Exploit for unknown platform in category web applications ========================================================== Zomplog ДобавлÑем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" ПовторÑем пароль "Confirm...
WEBInsta MM 1.3e (cabsolute_path) Remote File Include Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + WEBInsta Mailing list manager 1.3e cabsolutepath RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/ + WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...