1712 matches found
Unsafe library loading vulnerabilities — Mozilla
Mozilla developer Ehsan Akhgari reported that a function used to load external libraries on Windows platforms was using a relative path to a DLL-loading application and was thus vulnerable to binary planting if an attacker was able to place an executable of the same name in the current working...
Qt Creator code execution
Dynamic libraries are loaded with relative path...
brltty: insecure relative RPATH
Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting...
CentOS 5 : mysql (CESA-2010:0109)
Updated mysql packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL serve...
QQmail Multiple Xss Vulnerabilities-vulnerability warning-the black bar safety net
QQmail Multiple Xss Vulnerabilities Author: www.80vul.com 1. firefox2 css xss vulnerabilities styleBODY-moz-binding:url"http://www.80vul.coom/test.xmlxss"/style test.xml: ? xml version="1.0"?& gt; bindings xmlns="" binding id="xss" implementation constructor! CDATAalert'XSS'/constructor...
devalcms-lfi.txt
===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Bugzilla -- Directory Traversal in importxml.pl
A Bugzilla Security Advisory reports: When importing bugs using importxml.pl, the --attachpath option can be specified, pointing to the directory where attachments to import are stored. If the XML file being read by importxml.pl contains a malicious ../relativepath/to/localfile node, the script...
IBM DB2 database server multiple security vulnerabilities
TCP/523 remote administration service memory corruption. Dynamic livrary loading by relative path...
apt-listchanges privilege escalation
Library is loaded by relative path...
Directory traversal
Directory traversal vulnerability in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to bypass the chroot mechanism via a relative path when changing the current working directory...
Symantec Norton AntiVirus for Mac privilege escalation
External application is executed by relative path...
elinks format string vulnerability
Relative path is used to search text strings .po file. It makes it possible to spoof the file and to conduct format string attack...
PHP-Generics _App_Relative_Path远程文件包含漏洞
PHP-Generics是一款基于PHP的WEB应用程序。 PHP-Generics不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'APPRELATIVEPATH'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mutant Mutant 0.9.2 Mutant Mutant 0.9.1 目前没有解决方案提供： http://sourceforge.net/projects/php-generics...
Mac OS X writeconfig privilege escalation
launchctl utility is executed by relative path from suid application...
Roxio Toast 7 privilege escalation
External applications are launched with relative path...
AIX mpvg privilege escalation
External applications are executed with relative path...
AIX mklvcopy vulnerability
Insecure external application execution by relative path...
Symantec Live Update for Macintosh privilege escalation
suid applications executes external application by relative path...
F-Secure Internet Gatekeeper antivirus privilege escalation
Different scripts execute external application by relative path...
CVE-2005-2378
Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the 1 CUSTOMIZE or 2 desformat parameters to rwservlet. NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU...