1400 matches found
Microsoft Internet Explorer 6 - Local File Access
source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...
CVE-2006-6731: Undefined Security Weakness
Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...
CVE-2006-1942: Undefined Security Weakness
Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into...
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
nodez 4.6.1.1 mercury - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / software: site:...
CVE-2006-0388: Improper Control of Generation of Code
Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources...
Fedora Core 3 : mozilla-1.7.6-1.3.2 (2005-249)
A buffer overflow bug was found in the way Mozilla processes GIF images. It is possible for an attacker to create a specially crafted GIF image, which when viewed by a victim will execute arbitrary code as the victim. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the...
[Full-disclosure] WebArchiveX - Unsafe Methods Vulnerability
======================================================================== = WebArchiveX - Unsafe Methods Vulnerability = = Vendor Website: = http://http://www.csystems.co.il/webarchivex/index.aspx = = Affected Version: = WebArchiveX.dll 5.5.0.76 Installed Prior To Sep 6th, 2005 = = Public disclosu...
Adobe Acrobat Reader local files access
By using XML External Entity document script can access local files and have them sent to remote site...
CVE-2005-0464
The CVE concerns SGI IRIX gr_osview (6.5.x, including 6.5.22) which does not drop privileges when opening user-specified description files in debug mode. Local attackers can read a line from arbitrary files by using -d and -D, which prints the line as a formatting error. The core issue is an info...
CVE-2005-0588
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...
CVE-2005-0259
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file...
CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion
CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion source: https://www.securityfocus.com/bid/12564/info CitrusDB is reportedly affected by a vulnerability that permits the inclusion of any local PHP file. This issue is due to the application failing to properly sanitize user-supplied input. This...
GLSA-200501-03 : Mozilla, Firefox, Thunderbird: Various vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200501-03 Mozilla, Firefox, Thunderbird: Various vulnerabilities Maurycy Prodeus from isec.pl found a potentially exploitable buffer overflow in the handling of NNTP URLs. Furthermore, Martin from ptraced.net discovered that...
[Full-Disclosure] iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability
IBM AIX lspath Local File Access Vulnerability iDEFENSE Security Advisory 02.10.05 www.idefense.com/application/poi/display?id=195&type=vulnerabilities February 10, 2005 I. BACKGROUND The lspath program is a setuid root application, installed by default under newer versions of IBM AIX. It is used...
CVE-2005-0184
Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. dot dot in a get request...
CVE-2005-0072
zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files...
fkey[v0.0.2]: local/remote file accessibility exploit.
nothing major, just killing some time and strolled across this project on freshmeat. original version: http://fakehalo.us/xfkey.c --------------------- exploit: xfkey.c ---------------------- / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo...
fkey 0.0.2 - Local File Accessibility
/ fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-like daemon for accessing remote files i...
fkey 0.0.2 - Local File Accessibility
fkey 0.0.2 - Local File Accessibility / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-li...