Tribiq CMS 5.2.5 Path Disclosure

Vulnerability ID: HTB22640 Reference: http://www.htbridge.ch/advisory/pathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribiq http://tribiq.com/ Vulnerable Version: 5.2.5 and probably prior versions Vendor Notification: 05 October 2010 Vulnerability Type: Path disclosure Status: Fixed b...

Code injection

Unspecified vulnerability in the 1 PeopleSoft Enterprise FMS, 2 SCM, 3 EPM, 4 CRM, and 5 Campus Solutions components in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3527

Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect integrity and availability via unknown vectors...

IISWorks FileMan Remote User Database Disclosure

Exploit Title: IISWorks FileMan fileman.mdb Remote User Database Disclosure Disclosure Date: July 5, 2005 Author: Known Vulnerability Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar Version: OSVDB: 17824 Security Tracker ID: 1014383 Found exploited in the wild by: Joey Furr...

IISWorks FileMan - fileman.mdb Remote User Database Disclosure

IISWorks FileMan - fileman.mdb Remote User Database Disclosure Exploit Title: IISWorks FileMan fileman.mdb Remote User Database Disclosure Disclosure Date: July 5, 2005 Author: Known Vulnerability Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar Version: OSVDB: 17824 Securit...

Adobe Acrobat Reader PDF Catalog Handling

Adobe Acrobat is a product for creating, distributing, and viewing PDF documents. Adobe Acrobat Reader is a free application that allows for viewing and printing of PDF documents. Adobe extends the functionality of the PDF specification and their products as new revisions are produced. There exis...

CVE-2010-1170

The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltclmodules table regardless of the table's ownership and permissions, which allows remo...

Oracle Database 'XML DB component' Unspecified vulnerability

Oracle database is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:databaseserver";...

CVE-2010-0867

Unspecified vulnerability in the JavaVM component in Oracle Database 10.2.0.4, 11.1.0.7, and 11.2.0.1.0 allows remote authenticated users to affect integrity via unknown vectors...

Skype - URI Handler Input Validation

No description provided by source. Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI:...

Skype - URI Handler Input Validation

Skype - URI Handler Input Validation Description The Windows Skype client implements two URI handlers, Skype: and Skype-Plugin. Both handlers allow for easy browser integration and are supported by all modern browsers. When a Skype link is clicked, the Skype.exe process is spawned with the /URI:...

Command injection

Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command...

Debian DSA-1865-1 : linux-2.6 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1385 Neil Horman discovered a missing fix from the e1000 network driver. A...

Debian DSA-1826-1 : eggdrop - several vulnerabilities

Several vulnerabilities have been discovered in eggdrop, an advanced IRC robot. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2807 It was discovered that eggdrop is vulnerable to a buffer overflow, which could result in a remote user executing...

Microsoft Internet Explorer 67 - Remote Code Execution (Remote User Add)

Microsoft Internet Explorer 67 - Remote Code Execution Remote User Add Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use...

Microsoft Internet Explorer 6 / 7 Add User Exploit

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

Microsoft Internet Explorer 6/7 - Remote Code Execution (Remote User Add)

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

Infragistics WebHtmlEditor 7.1 Directory Traversal / File Upload

----------------------------------------------------------------------------------------------------------------------------- Infragistics WebHtmlEditor.v7.1InitialDirectory,igeduploadid directory Traversal and Arbitrary File upload vulnerability...

Infragistics WebHtmlEditor 7.1 - Multiple Vulnerabilities

----------------------------------------------------------------------------------------------------------------------------- Infragistics WebHtmlEditor.v7.1InitialDirectory,igeduploadid directory Traversal and Arbitrary File upload vulnerability...

AIX 5.3 TL 10 : bos.net.tcp.server (U823185)

The remote host is missing AIX PTF U823185, which is related to the security of the package bos.net.tcp.server. AIX 'named' is an implementation of BIND Berkeley Internet Name Domain providing server functionality for the Domain Name System DNS Protocol. AIX currently ships and supports three...