CVE-2007-4750

Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension...

Information disclosure

RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files...

CVE-2007-4751

RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files...

CVE-2007-4750

Affected product: RemoteDocs R-Viewer (Windows) prior to 1.6.3768. Issue: design flaw in RDZ handling can execute code when opening a crafted RDZ archive, with the first file’s extension triggering execution; also exists potential leakage of unencrypted document copies from temporary directories....

CVE-2007-4750

Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension...

CVE-2007-4751

CVE-2007-4751 affects RemoteDocs R-Viewer prior to 1.6.3768. The vulnerability arises from storing encrypted RDZ data in unencrypted temporary files, enabling local users to read sensitive information from leftover copies. The associated Symantec advisory also indicates a design flaw that can all...

CVE-2007-4751

RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files...

R-Viewer < 1.6.3768 Multiple Vulnerabilities

R-Viewer, a secure document viewer from remotedocs.com, is installed on the remote host. According to the registry, the installation of R-Viewer on the remote Windows host allows arbitrary code to be executed without a user's knowledge and stores unencrypted copies of previously-opened documents ...

wordpress-toolkit-gui.txt

Copyright c 2007 Lance M. Havok . All Rights Reserved. Exploits R' Us: bringing the amazing world of exploitation toys to your mom. Please read http://www.info-pull.com/code/DISCLAIMER for licensing terms. begin require 'pwnpress' require 'rubygems' require 'fox16' include Fox rescue puts "Need...

reprepro更新代码库签名验证绕过安全限制漏洞

BUGTRAQ ID: 25537 reprepro是用于处理debian软件包的本地代码库的工具。 reprepro在处理密钥交换时存在漏洞，远程攻击者可能利用此漏洞绕过验证。 在使用update命令升级代码库时reprepro只使用请求密钥验证签名，而请求密钥的签名根本不存在时也不会报告，因此会接收任何使用未知密钥签名的内容，这就导致不安全内容绕过了安全检查。 Bernhard R. Link reprepro 2.2.3 Bernhard R. Link reprepro 1.3.0-1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Unfixed XSS vulnerability at status.gr

Security researcher St@R-gaZ3r, has submitted on 07/11/2007 a cross-site-scripting XSS vulnerability affecting status.gr, which at the time of submission ranked 245271 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is currently...

Unfixed XSS vulnerability at www.unisystems.gr

Security researcher St@R-gaZ3r, has submitted on 07/11/2007 a cross-site-scripting XSS vulnerability affecting www.unisystems.gr, which at the time of submission ranked 1499759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...

edocstore-sql.txt

--==+================================================================================+==-- --==+ eDocStore Latest Versions Local File Inclusion Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog good work xprog...

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

LAN Management System LMS 1.9.6 - Remote File Inclusion !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

Unfixed XSS vulnerability at www.books-in-greek.gr

Security researcher St@R-gaZ3r, has submitted on 06/11/2007 a cross-site-scripting XSS vulnerability affecting www.books-in-greek.gr, which at the time of submission ranked 500284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/11/2007. It i...

Unfixed XSS vulnerability at www.sidenor.gr

Security researcher St@R-gaZ3r, has submitted on 06/11/2007 a cross-site-scripting XSS vulnerability affecting www.sidenor.gr, which at the time of submission ranked 1322820 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/11/2007. It is...

Unfixed XSS vulnerability at www.books-in-greek.gr

Security researcher St@R-gaZ3r, has submitted on 06/11/2007 a cross-site-scripting XSS vulnerability affecting www.books-in-greek.gr, which at the time of submission ranked 500284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/11/2007. It i...

Unfixed XSS vulnerability at www.blackhumor.gr

Security researcher St@R-gaZ3r, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting www.blackhumor.gr, which at the time of submission ranked 90663 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.blackhumor.gr

Security researcher St@R-gaZ3r, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting www.blackhumor.gr, which at the time of submission ranked 90663 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.blackhumor.gr

Security researcher St@R-gaZ3r, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting www.blackhumor.gr, which at the time of submission ranked 90663 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...