Directory traversal

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

CVE-2010-1511

CVE-2010-1511 affects KGet 2.4.2 within KDE SC 4.0.0–4.4.3. The flaw arises from not properly requesting download confirmation when processing a metalink, enabling a remote attacker to overwrite arbitrary files via a crafted metalink. CVSS metrics from NVD indicate Network access, Low attack comp...

CVE-2010-1000

CVE-2010-1000 affects KDE SC KGet (KDENETWORK) with directory traversal in the metalink file’s name attribute, enabling remote attackers to create arbitrary files via crafted metalink entries. Affected: KDE SC 4.0.0–4.4.3; vulnerability in KGetMetalink::File::isValidNameAttr. Impact: potential ar...

CVE-2010-1000

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

CVE-2010-1511

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...

CVE-2010-1000

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

Race condition

Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked...

CVE-2010-0923

The CVE-2010-0923 entry concerns KDE KDE SC 4.4.0, specifically the KRunner lock module’s file workspace/krunner/lock/lockdlg.cc. A race condition involving multiple forked processes can let physically proximate attackers bypass the KScreenSaver and access an unattended workstation by pressing th...

South River Technologies WebDrive Service privilege escalation

No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location:...

WS_FTP FTPD "STAT"command overflow parsing-vulnerability warning-the black bar safety net

The following analysis is based on the WSFTP Server 4.0.1. EVAL 4 7 1 5 6 3 1 4version, only the analysis of the“STAT”command overflow . In fact, WSFTP in processing STAT command, many places are length of the judgment, however, there is a place he has been missed, Well, our chance came.:...

CVE-2009-2163

Cross-site scripting XSS vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the scerror parameter...

Thomson mp3PRO Player/Encoder (M3U File) Crash PoC

Exploit for unknown platform in category dos / poc ================================================== Thomson mp3PRO Player/Encoder M3U File Crash PoC ================================================== !/usr/bin/perl Discovered & Written by : Hakxer Sec-geeks.com EgY Coders Team :D program :...

Joomla! Component com_news - SQL Injection

Joomla! Component comnews - SQL Injection ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T...

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow !-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description:...

Unfixed XSS vulnerability at www.sae.org

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.sae.org, which at the time of submission ranked 82542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...

Unfixed XSS vulnerability at www.search-this.com

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.search-this.com, which at the time of submission ranked 34144 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is...

Unfixed XSS vulnerability at www3.addall.com

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www3.addall.com, which at the time of submission ranked 38909 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is currently...

Unfixed XSS vulnerability at www.h-net.org

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.h-net.org, which at the time of submission ranked 92460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is currently...

Unfixed XSS vulnerability at www.net.com

Security researcher Sc@ry, has submitted on 06/06/2007 a cross-site-scripting XSS vulnerability affecting www.net.com, which at the time of submission ranked 18466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2007. It is currently...

Unfixed XSS vulnerability at coolkids.com

Security researcher Sc@ry, has submitted on 06/06/2007 a cross-site-scripting XSS vulnerability affecting coolkids.com, which at the time of submission ranked 8852416 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2007. It is currently...