Lucene search
+L

2173 matches found

securityvulns
securityvulns
added 2006/02/28 12:00 a.m.27 views

FarsiNews 2.5Pro Exploit

!/usr/bin/perl HESSAM-X FarsiNews 2.5Pro Exploi Exploit by Hessam-x www.hessamx.net Iran Hackerz Security Team WebSite: www.hackerz.ir Summery Name : FarsiNews www.farsinewsteam.com version : 2.5Pro in FarsiNews if you change the archive value : http://localhost/index.php?archive=hamid see :...

0.5AI score
SaveExploits0
CVE
CVE
added 2006/01/09 11:00 p.m.59 views

CVE-2006-0145

The CVE-2006-0145 entry concerns the kernfs_xread function in kernfs for NetBSD (versions 1.6–2.1) and OpenBSD 3.8. The issue is improper validation of file offsets against negative 32-bit values that occur due to truncation, enabling local users to read arbitrary kernel memory and potentially ga...

4.6CVSS6.4AI score0.00367EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2005/08/05 4:00 a.m.53 views

CVE-2002-2095

CVE-2002-2095 affects the Joe Testa hellbent 01 webserver. The vulnerability allows attackers to read files listed in the hellbent.prefs by creating a similarly named file in the web root (e.g., using index.webroot or index.ipallow). The NVD entry reports a network-accessible issue with partial c...

5CVSS6.9AI score0.01774EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2005/07/13 4:00 a.m.60 views

CVE-2005-2248

The CVE-2005-2248 entry concerns DownloadProtect prior to 1.0.3, where a directory traversal flaw could allow remote attackers to read files outside the intended download folder. Technical details from connected sources confirm the affected component and underlying issue is a path traversal in th...

5CVSS7AI score0.01449EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2005/06/21 4:00 a.m.60 views

CVE-2002-1684

The CVE-2002-1684 entry concerns a directory traversal vulnerability in Deerfield D2Gfx 1.0.2 and BadBlue Enterprise Edition 1.5.x plus BadBlue Personal Edition 1.5.6. The vulnerability allows remote attackers to read arbitrary files via a ../ traversal in the script used to read Microsoft Office...

5CVSS7AI score0.04905EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2005/05/03 4:00 a.m.58 views

CVE-2005-1439

CVE-2005-1439 : In osTicket, a directory traversal vulnerability exists in attachments.php that allows remote attackers to read arbitrary files via .. sequences in the file parameter. Evidence from multiple sources confirms a network-wide, unauthenticated remote attack vector with a base CVSS v2 ...

7.5CVSS6.7AI score0.01734EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2005/04/17 12:00 a.m.21 views

maxthon_arbitrary_read-write.html.txt

var iVuln=null; function checkVuln try if external.readFilemaxsecurityid,"m2bookmark","plugin.ini"!=null pls.innerText='Done!'; alert"Vulnerable!"; showFileContent; window.clearIntervaliVuln; else window.status=''; // Refresh the "max.src" script by setting the source file as the same file...

7.4AI score
SaveExploits0
CVE
CVE
added 2005/03/04 5:00 a.m.57 views

CVE-2005-0630

CVE-2005-0630 affects PBLang 4.63, where an authenticated remote user can read arbitrary files by supplying a full pathname in the orig parameter of sendpm.php (directory traversal). The vulnerability is classified as low risk in NVD (CVSS v2 base score 2.1; LOCAL access, low complexity, partial ...

2.1CVSS6.2AI score0.01709EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2005/02/27 5:00 a.m.70 views

CVE-2005-0571

PunBB 1.2.1 contains an information-disclosure flaw in admin_loader.php: the plugin parameter allows remote attackers to read arbitrary files. This is a file-read vulnerability (no user authentication required) with a CVSS base score of 5.0 (medium) per NVD, indicating network-remote access and l...

5CVSS6.7AI score0.01425EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2005/02/24 5:00 a.m.83 views

CVE-2005-0530

CVE-2005-0530 is a signedness error in the copy_from_read_buf function in n_tty.c of the Linux kernel (affected: 2.6.10 and 2.6.11rc1) that allows local users to read kernel memory via a negative argument. The vulnerability is documented across multiple advisories, including Red Hat (RHSA-2005:36...

2.1CVSS5AI score0.00474EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2005/02/23 5:00 a.m.28 views

CVE-2005-0520

ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut .LNK files in the SITE COPY command, a different vulnerability than CVE-2005-0519...

6.5AI score0.03652EPSS
SaveExploits0References5
NVD
NVD
added 2004/12/31 5:00 a.m.26 views

CVE-2004-2607

A numeric casting discrepancy in sdlaxfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer...

2.1CVSS5.7AI score0.0046EPSS
SaveExploits1References8
zdt
zdt
added 2004/11/10 12:00 a.m.81 views

Linux Kernel (<= 2.4.27 , 2.6.8) binfmt_elf Executable File Read Exploit

Exploit for linux platform in category local exploits ======================================================================== Linux Kernel include include include include include include include include define BADNAME "/tmp/elfdump" void usagechar s printf"\nUsage: %s executable\n\n", s; exit0; ...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2004/11/10 12:00 a.m.54 views

Linux Kernel 2.4.27/2.6.8 - 'binfmt_elf' Executable File Read

/ binfmtelf executable file read vulnerability gcc -O3 -fomit-frame-pointer elfdump.c -o elfdump Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY WARRANTY. COPYING, PRINTING, DISTRIBUTION, MODIFICATI...

2.1CVSS5.8AI score0.0081EPSS
SaveExploits1
CVE
CVE
added 2004/07/06 4:00 a.m.74 views

CVE-2004-0577

CVE-2004-0577 affects WinGate (notably 5.2.3 build 901 and 6.0 beta 2 build 942, plus 5.0.5). The vulnerability is an input-validation flaw in the wingate-internal path that allows remote, unauthenticated attackers to read arbitrary files from the root directory via a URL request to the wingate-i...

5CVSS6.8AI score0.01373EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2002/12/31 5:00 a.m.19 views

CVE-2002-1684

Directory traversal vulnerability in 1 Deerfield D2Gfx 1.0.2 or 2 BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ dot dot slash in the script used to read Microsoft Office documents...

5CVSS6.6AI score0.04905EPSS
SaveExploits0References3
NVD
NVD
added 2002/12/31 5:00 a.m.19 views

CVE-2002-1971

The ping utility in networkingutils.php in Sourcecraft NetworkingUtils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument...

10CVSS6.8AI score0.04135EPSS
SaveExploits1References5
NVD
NVD
added 2002/08/12 4:00 a.m.17 views

CVE-2002-0418

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. dot dot and a null character in the paramname parameter...

5CVSS6.7AI score0.02197EPSS
SaveExploits1References3
securityvulns
securityvulns
added 2002/07/29 12:00 a.m.35 views

Phenoelit Advisory #0815 +-+

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +-+ Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisroy http://www.phenoelit.de/stuff/HPsnmp.txt Affected Products Hewlett Packard HP Printers HP Bug ID: Not assigned CERT Vulnerability ID: 3770...

0.8AI score
SaveExploits0
Cvelist
Cvelist
added 2002/03/09 5:00 a.m.33 views

CVE-2001-0593

Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' dot dot attack in the template parameter...

6.6AI score0.03363EPSS
SaveExploits2References4
Rows per page
Query Builder