Lucene search
+L

1398 matches found

0day.today
0day.today
added 2010/04/03 12:0 a.m.21 views

Zip Unzip v6 (.zip) 0day stack buffer overflow PoC exploit

Exploit for windows platform in category local exploits ========================================================== Zip Unzip v6 .zip 0day stack buffer overflow PoC exploit ========================================================== ?php / Zip Unzip v6 .zip 0day stack buffer overflow PoC exploit...

6.8AI score
Exploits0
exploitpack
exploitpack
added 2010/04/03 12:0 a.m.17 views

Zip Unzip 6.0 - .zip Local Stack Buffer Overflow

Zip Unzip 6.0 - .zip Local Stack Buffer Overflow / // local file header $lfheader = "\x50\x4B\x03\x04\x14\x00\x00\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00". "\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x0f\x00\x00\x00"; // central directory file header $cdfh...

1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2010/03/29 12:0 a.m.61 views

Mac OS X Multiple Vulnerabilities (Security Update 2010-002)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied. This security update contains fixes for the following products : - AppKit - Application Firewall - AFP Server - Apache - ClamAV - CoreTypes - CUPS - curl - Cyrus IMAP - Cyrus SASL - Disk...

10CVSS5.8AI score0.9444EPSS
Exploits74References67
Prion
Prion
added 2010/01/13 1:30 a.m.20 views

Design/Logic Flaw

Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect confidentiality via unknown vectors...

1CVSS5.6AI score0.00311EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2010/01/13 1:0 a.m.27 views

CVE-2009-3412

Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect confidentiality via unknown vectors...

7.9AI score0.00311EPSS
Exploits0References3
CVE
CVE
added 2010/01/13 1:0 a.m.59 views

CVE-2009-3412

CVE-2009-3412 affects Oracle Database components (Unzip) in 9.2.0.8, 9.2.0.8DV and 10.1.0.5, and Oracle Application Server 10.1.2.3. Root cause: Unzip component vulnerability enabling local logon and partial confidentiality impact. CVSS in NVD shows Low base score (Local, High auth, Partial confi...

1CVSS7.6AI score0.00311EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2009/10/13 12:0 a.m.6 views

SLES10: Security update for unzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: unzip More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

0.1AI score
Exploits0
OpenVAS
OpenVAS
added 2009/10/13 12:0 a.m.10 views

SLES10: Security update for unzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: unzip More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

7.5AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:0 a.m.31 views

Mandriva Linux Security Advisory : unzip (MDVSA-2008:068)

Tavis Ormandy of Google Security discovered an invalid pointer flaw in unzip that could lead to the execution of arbitrary code with the privileges of the user running unzip. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

9.3CVSS6.1AI score0.0629EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.16 views

Ubuntu Update for unzip vulnerability USN-589-1

Ubuntu Update for Linux kernel vulnerabilities USN-589-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5891.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for unzip vulnerability USN-589-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

9.3CVSS0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.6AI score0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/03/06 12:0 a.m.14 views

RedHat Update for unzip RHSA-2008:0196-01

Check for the Version of unzip OpenVAS Vulnerability Test RedHat Update for unzip RHSA-2008:0196-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

9.3CVSS9.6AI score0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/03/06 12:0 a.m.43 views

RedHat Update for unzip RHSA-2008:0196-01

Check for the Version of unzip OpenVAS Vulnerability Test RedHat Update for unzip RHSA-2008:0196-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

9.3CVSS9.6AI score0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.27 views

CentOS Update for unzip CESA-2008:0196-01 centos2 i386

Check for the Version of unzip OpenVAS Vulnerability Test CentOS Update for unzip CESA-2008:0196-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

9.3CVSS0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.28 views

CentOS Update for unzip CESA-2008:0196 centos3 x86_64

Check for the Version of unzip OpenVAS Vulnerability Test CentOS Update for unzip CESA-2008:0196 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

9.3CVSS0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.24 views

CentOS Update for unzip CESA-2008:0196-01 centos2 i386

Check for the Version of unzip OpenVAS Vulnerability Test CentOS Update for unzip CESA-2008:0196-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

9.3CVSS0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.32 views

CentOS Update for unzip CESA-2008:0196 centos3 x86_64

Check for the Version of unzip OpenVAS Vulnerability Test CentOS Update for unzip CESA-2008:0196 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

9.3CVSS0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.27 views

CentOS Update for unzip CESA-2008:0196 centos3 i386

Check for the Version of unzip OpenVAS Vulnerability Test CentOS Update for unzip CESA-2008:0196 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

9.3CVSS0.0629EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.17 views

CentOS Update for unzip CESA-2008:0196 centos3 i386

Check for the Version of unzip OpenVAS Vulnerability Test CentOS Update for unzip CESA-2008:0196 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

9.3CVSS0.0629EPSS
Exploits1References2
seebug.org
seebug.org
added 2008/11/28 12:0 a.m.76 views

Discuz! admin/database.inc.php get-webshell bug

由于Discuz!的admin\database.inc.php里action=importzip解压zip文件时,导致可以得到webshell.br / 在文件admin\database.inc.php里代码:br / .....br / elseif$operation == 'importzip' br / br / requireonce DISCUZROOT.'admin/zip.func.php';br / $unzip = new SimpleUnzip;br / $unzip-ReadFile$datafileserver;br / if$unzip-Count == ...

7AI score
Exploits0
Rows per page
Query Builder