Code injection

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

Xivo 1.2 - Arbitrary File Download

Xivo 1.2 - Arbitrary File Download Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link:...

Xivo 1.2 - Arbitrary File Download

Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Version: 1.2...

WebTitan - logs-x.php Directory Traversal

WebTitan - logs-x.php Directory Traversal source: https://www.securityfocus.com/bid/55904/info WebTitan is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. A remote attacker could exploit the vulnerability using directory-traversal...

Sensitive server info leaked from weather.gov Vulnerability

Kosova Hacker's Security group today release very sensitive server info of "The National Weather Service", which was gathered due to a "Local file inclusion" Vulnerability in weather.gov . By definition, Local File Inclusion also known as LFI is the process of including files on a server through...

Joomla Hello component suffers from a local file inclusion vulnerability.

No description provided by source. Title : Joomla Component comhello Local File Include Author : Ajax Security Team Discovered By : devilzc0der & Dominator Dork : inurl:"comhello" h0m3 : www.ajaxtm.com Software Link : www.joomla.com Level : High p0c :...

Wordpress Plugins (ss-downloads v1.4.3) XSRF/File Disclosure Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Atlassian JIRA FishEye and Crucible Plugins XML Parsing Unspecified Security Vulnerability

The FishEye and Crucible plugins for JIRA are prone to an unspecified security vulnerability because they fail to properly handle crafted XML data. Exploiting this issue allows remote attackers to cause denial-of- service conditions or to disclose local sensitive files in the context of an affect...

Atlassian JIRA FishEye and Crucible Plugins XML Parsing Unspecified Security Vulnerability

The FishEye and Crucible plugins for JIRA are prone to an unspecified security vulnerability because they fail to properly handle crafted XML data. Exploiting this issue allows remote attackers to cause denial-of- service conditions or to disclose local sensitive files in the context of an affect...

Atlassian JIRA FishEye 2.5.7 Crucible 2.5.7 Plugins - XML Parsing Security

Atlassian JIRA FishEye 2.5.7 Crucible 2.5.7 Plugins - XML Parsing Security source: https://www.securityfocus.com/bid/53603/info The FishEye and Crucible plugins for JIRA are prone to an unspecified security vulnerability because they fail to properly handle crafted XML data. Exploiting this issue...

. the svn directory does not have permissions to restrict the use of loopholes in the summary(including the repair program)-vulnerability warning-the black bar safety net

The existing site use. svn to do a production environment version control, however. the svn directory does not have to do the access restrictions, you can through the. svn/entries to traverse the file and directory list. In order to save energy, I wrote a php scripthttp://rains.im/?q=node/18to do...

RazorCMS 1.2 - Directory Traversal

RazorCMS 1.2 - Directory Traversal Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is...

Pragyan CMS 3.0 - Remote File Disclosure

Pragyan CMS 3.0 - Remote File Disclosure Title Pragyan CMS v 3.0 = Remote File Disclosure Author Or4nG.M4n Download http://space.dl.sourceforge.net/project/pragyan/pragyan/3.0/PragyanCMS-v3.0-beta.tar.bz2 vuln download.lib.php line 16 vuln index.php line 234 $GET'fileget' exploit...

Pragyan CMS v 3.0 Remote File Disclosure

Exploit for php platform in category web applications Title Pragyan CMS v 3.0 = Remote File Disclosure Author Or4nG.M4n Download http://space.dl.sourceforge.net/project/pragyan/pragyan/3.0/PragyanCMS-v3.0-beta.tar.bz2 vuln download.lib.php line 16 vuln index.php line 234 $GET'fileget' exploit...

HP Application Lifestyle Management 11 - 'GetInstalledPackages' Local Privilege Escalation

source: https://www.securityfocus.com/bid/50982/info HP Application Lifestyle Management is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. !/bin/bash Simple PoC : Run as user, when vulnerable function...

BOOKSolved 1.2.2 File Disclosure

...BOOKSolved 1.2.2 l Remote File Disclosure Vulnerability ...Discovered by bd0rk ...Contact: bd0rkathackermail.com or follow me on twitter ...Greetz: inj3ct0r-Team, x0r32, Perle, Siber King ...Tested on: Ubuntu-Linux ...MEZ-Time: 08:17 ...Vendor: http://www.usolved.net/ ...Download:...

Typo3 - File Disclosure

Typo3 - File Disclosure | | | ||\ || || || | \ // | | | || \ || || || | |\ //| | | \ | | |/ / | | || \ || || || | | \ // | | | \ | | / / | | || \ || || || | | \ // | | | | | | | /'\ / / | | || \ || || || | | \ // | | | | | \ \ / / / | | || \ || |||| | | \// | | | | | | | \ \ / / | |...