CVE-2017-17458

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be...

Free Personal Self Hosted Dynamic DNS

Free Personal Self Hosted Dynamic DNS with BIND and DNSSEC Environment: Server: static IP, running BIND Home: dynamic IP, running Debian/buntu Key Generation First step is to generate a key on the server. /etc/bind $ sudo dnssec-keygen -a HMAC-MD5 -b 512 -n HOST home.dynamic.n0where.net This...

photokron <= 1.7 (update script) Remote Database Disclosure Exploit

No description provided by source. !/usr/bin/perl Script : PhotoKron All Version All Version Author : Pr0metheuS Gr33tz to Gr33tz-Team Gr33tz-Team.ORG Dork : Powered by photokorn INFO Works IF /update/ is on server...60% site are vulnerable.... INFO use LWP::UserAgent; if @ARGV!=2 print...

CVE-2012-5231

miniCMS 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code via a crafted 1 pagename or 2 area variable containing an executable extension, which is not properly handled by a update.php when writing files to content/, or b updatenews.php when writing files to content/news/...

Mozilla Firefox Multiple Vulnerabilities (Aug 2012) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XSS vulnerability in Onyx

Vulnerability ID: HTB22537 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinonyx1.html Product: Onyx Vendor: Hulihan Applications http://hulihanapplications.com/projects/onyx Vulnerable Version: 0.3.2 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type:...

GLSA-200506-10 : LutelWall: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200506-10 LutelWall: Insecure temporary file creation Eric Romang has discovered that the newversioncheck function in LutelWall insecurely creates a temporary file when updating to a new version. Impact : A local attacker could...

LutelWall: Insecure temporary file creation

Background LutelWall is a high-level Linux firewall configuration tool. Description Eric Romang has discovered that the newversioncheck function in LutelWall insecurely creates a temporary file when updating to a new version. Impact A local attacker could create symbolic links in the temporary fi...

LutelWall Linux firewall symbolic links problem

Symbolic links problem in update script...

phpGroupWare 0.9.14 - 'Tables_Update.Inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/12074/info phpGroupWare is prone to a remote file include vulnerability, potentially allowing the execution of malicious PHP code. This would occur in the context of the affected web server. The tablesupdate.inc.php script contains the following include...

phpGroupWare 0.9.14 - Tables_Update.Inc.php Remote File Inclusion

phpGroupWare 0.9.14 - TablesUpdate.Inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/12074/info phpGroupWare is prone to a remote file include vulnerability, potentially allowing the execution of malicious PHP code. This would occur in the context of the affected web server...