chm2pdf Insecure Temporary File Creation or DoS Vulnerability

chm2pdf is prone to an insecure temporary file creation or denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

verlihub -- insecure temporary file usage and arbitrary command execution

securityfocus reports: An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files,...

CVE-2008-4875

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

Directory traversal

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

CVE-2008-4875

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

Kure 0.6.3 (index.php post,doc) Local File Inclusion Vulnerability

No description provided by source. Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

Apache Tomcat 6.0.16 - 'RequestDispatcher' Information Disclosure

source: https://www.securityfocus.com/bid/30494/info Apache Tomcat is prone to a remote information-disclosure vulnerability. Remote attackers can exploit this issue to obtain the contents of sensitive files stored on the server. Information obtained may lead to further attacks. The following...

Apache Tomcat 6.0.16 - RequestDispatcher Information Disclosure

Apache Tomcat 6.0.16 - RequestDispatcher Information Disclosure source: https://www.securityfocus.com/bid/30494/info Apache Tomcat is prone to a remote information-disclosure vulnerability. Remote attackers can exploit this issue to obtain the contents of sensitive files stored on the server...

CVE-2008-3395

Calacode @Mail 5.41 on Linux uses weak world-readable permissions for 1 webmail/libs/Atmail/Config.php and 2 webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information by reading these files. NOTE: the provenance of this information is unknown; the details are obtained...

MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may exploit these issues to obtain sensitive information. MyBlog 0.9.8 is...

MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities

MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may...

Sina DLoader Class - ActiveX Control 'DonwloadAndInstall' Method Arbitrary File Download

source: https://www.securityfocus.com/bid/30223/info Sina DLoader is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers may exploit this issue to overwrite sensitive files with malicious data that will...

Oracle Application Server Portal 10g Authentication Bypass

The remote host is running Oracle Application Server. By sending a specially crafted GET request to the version of Oracle Application Server installed on the remote host, an unauthenticated attacker can access potentially sensitive files listed under the directory '/davportal/portal'. C Tenable...

Code injection

phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter...

CVE-2008-1782

phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter...

CVE-2008-1264

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file...

Default credentials

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file...

CVE-2008-1264

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file...

CVE-2008-1264: Improper Authentication

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file...

Globsy 1.0 (file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================== Globsy 1.0 file Remote File Disclosure Vulnerability ====================================================== Globsy 1.0 file Remote File Disclosure Vulnerability...