9677 matches found
Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180)
TrueCrypt 4.3 for Linux from http://www.truecrypt.org/ It seems to be possible to perform various denial of service attacks on a Linux computer running TrueCrypt in set-uid root mode, or possible introduce evil binaries into normally trusted locations. I tested this on the latest version, 4.3,...
Image_Upload Script 2.0 - Multiple Remote File Inclusions
ImageUpload Script 2.0 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/23132/info ImageUpload Script is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...
Viper Web Portal 0.1 - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/22979/info Viper Web Portal is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks ar...
Premod SubDog 2 - includesthemen_portal_mitte.php?phpbb_root_path Remote File Inclusion
Premod SubDog 2 - includesthemenportalmitte.php?phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing...
Symantec Security Advisory SYM07-002 http://www.symantec.com/avcenter/security/Content/2007.02.22.html BID 22564 22 Feb, 2007 Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Products and Automated Support Assistant Revision History...
SupportSoft ActiveX controls contain multiple buffer overflows
Overview The SupportSoft ActiveX controls contain multiple buffer overflow vulnerabilities, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SupportSoft provides multiple ActiveX packages that are used by third party vendors to...
Plantilla - list_main_pages.php?nfolder Traversal Arbitrary File Access
Plantilla - listmainpages.php?nfolder Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22669/info Simple Plantilla PHP is prone to multiple input-validation issues, including a local file-include vulnerability and an arbitrary file-upload vulnerability. Attackers can...
SUSE-SA:2006:056: gzip
The remote host is missing the patch for the advisory SUSE-SA:2006:056 gzip. The gzip tool does not handle some specific values correctly when unpacking archives. This leads to vulnerabilities like buffer overflows or infinite loops. Various different programs like mail clients, file explorer, et...
Microsoft Windows Image Acquisition Service Privilege Escalation Vulnerability
Description Microsoft Windows Image Acquisition WIA service is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to elevate user privileges. Successful exploits will result in the complete compromise of vulnerable computers. NOTE: The affected service is...
ip3netaccess.txt
I - TITLE Security advisory: Arbitrary file disclosure vulnerability in IP3 NetAccess leads to full system compromise II - SUMMARY Description: Arbitrary file disclosure vulnerability in IP3 NetAccess leads to full system compromise Author: Sebastian Wolfgarten sebastian at wolfgarten dot com Dat...
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion
source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion
source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
IP3 NetAccess < 4.1.9.6 - Arbitrary File Disclosure
I - TITLE Security advisory: Arbitrary file disclosure vulnerability in IP3 NetAccess leads to full system compromise II - SUMMARY Description: Arbitrary file disclosure vulnerability in IP3 NetAccess leads to full system compromise Author: Sebastian Wolfgarten sebastian at wolfgarten dot com Dat...
[Full-disclosure] Secunia Research: Sienzo Digital Music Mentor NCTAudioFile2 ActiveX Control Buffer Overflow
====================================================================== Secunia Research 24/01/2007 - Sienzo Digital Music Mentor - - NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...
Virtual Host Administrator 0.1 - Modules_Dir Remote File Inclusion
source: https://www.securityfocus.com/bid/22218/info Virtual Host Administrator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...
Magic Photo Storage Website - '/admin/add_welcome_text.php?_config[site_path]' Remote File Inclusion
source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...
Magic Photo Storage Website - '/user/register.php?_config[site_path]' Remote File Inclusion
source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...
Magic Photo Storage Website - adminadd_templates.php?_config[site_path] Remote File Inclusion
Magic Photo Storage Website - adminaddtemplates.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiti...
Magic Photo Storage Website - useruser_membership_password.php?_config[site_path] Remote File Inclusion
Magic Photo Storage Website - userusermembershippassword.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data...
Magic Photo Storage Website - '/user/delete_category.php?_config[site_path]' Remote File Inclusion
source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...