Design/Logic Flaw

The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...

fizzle-access.txt

Fizzle allows feeds to use HTML in feed data resulting in JavaScript being run in the chrome: window with chrome permissions. The extension will convert HTML entities back to their ASCII equivalents thus for formatting to lose their layout I told him it would be too difficult to sanitize the data...

Fizzle : Firefox Extension Vulnerability

Fizzle allows feeds to use HTML in feed data resulting in JavaScript being run in the chrome: window with chrome permissions. The extension will convert HTML entities back to their ASCII equivalents thus becomes and so forth. Various feeds fields are vulnerable including the title which allows th...

Fedora Core 6 : xen-3.0.3-8.fc6 (2007-343)

A flaw was found affecting the VNC server code in QEMU. On a fully virtualized guest VM, where qemu monitor mode is enabled, a user who had access to the VNC server could gain the ability to read arbitrary files as root in the host filesystem. CVE-2007-0998 Note that Tenable Network Security has...

Fizzle 0.5 - RSS Feed HTML Injection

source: https://www.securityfocus.com/bid/23144/info Fizzle is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of the...

CVE-2007-1509

Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt aka Holtstraeter Rot 13 allows remote attackers to read arbitrary files via a .. dot dot in the datei parameter...

CVE-2007-0998

Summary of CVE-2007-0998 : The vulnerability concerns the VNC server implementation in QEMU (as used by Xen and potentially other environments). It allows local users within a guest OS to read arbitrary files on the host via the QEMU monitor mode, demonstrated by mapping files to a CD-ROM device;...

Code injection

download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the filename parameter...

PostgreSQL: Multiple vulnerabilities

Background PostgreSQL is an open source object-relational database management system. Description PostgreSQL does not correctly check the data types of the SQL function arguments under unspecified circumstances nor the format of the provided tables in the query planner. Impact A remote...

PHP substr_compare information leak

Integer overflow allows memory reading behind variable boundaries...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1158

Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2007-1199

CVE-2007-1199 describes a vulnerability in Adobe Reader/Acrobat where a PDF containing a file:// URI can cause a remote attacker to read arbitrary files, as demonstrated with URI(file:///C:/). The issue is distinct from CVE-2007-0045. The NVD entry lists a MEDIUM impact with network attack vector...

CVE-2007-1191

The Social Bookmarks del.icio.us plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file...

CVE-2007-1191

The CVE-2007-1191 issue affects the Social Bookmarks (del.icio.us) plug‑in 8F for Quicksilver. The vulnerability detail states that usernames and passwords are written in plaintext to the file /Library/Logs/Console/UID/Console.log, allowing local users to read sensitive information. This is a loc...

SUSE-SA:2006:036: mysql

The remote host is missing the patch for the advisory SUSE-SA:2006:036 mysql. The database server MySQL was updated to fix the following security problems: - Attackers could read portions of memory by using a user name with trailing null byte or via COMTABLEDUMP command CVE-2006-1516,...

CVE-2007-0929

CVE-2007-0929 affects the php rrd browser project, specifically versions prior to 0.2.1. The vulnerability is a directory traversal flaw that allows remote attackers to read arbitrary files by manipulating the p parameter with ".." sequences. The NVD entry documents a base CVSS v2 score of 5.0 (M...

ActSoft DVD-Tools (dvdtools.ocx) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc =================================================================== ActSoft DVD-Tools dvdtools.ocx Remote Buffer Overflow Exploit PoC ===================================================================...

CVE-2007-0823

xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file permissions and read other users' files, or obtain other sensitive information, by reading the xterm process memory. NOT...