181 matches found
MySQL (Linux) - Database Privilege Escalation
MySQL Linux - Database Privilege Escalation use DBI; $|=1; =for comment MySQL privilege elevation Exploit This exploit adds a new admin user. By Kingcope Tested on Debian Lenny mysql-5.0.51a OpenSuSE 11.4 5.1.53-log How it works: This exploit makes use of several things: The attacker is in...
Scientific Linux Security Update : vsftpd on SL5.x i386/x86_64
A memory leak was discovered in the vsftpd daemon. An attacker who is able to connect to an FTP service, either as an authenticated or anonymous user, could cause vsftpd to allocate all available memory if the 'denyfile' option was enabled in vsftpd.conf. CVE-2007-5962 As well, this updated packa...
Cross site scripting
Cross-site scripting XSS vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter aka Email address field in an edituser configuration action...
Fedora 16 : rocksndiamonds-3.3.0.1-5.fc16 (2012-1567)
Apply fix for user configuration/cache directory permission issue CVE-2011-4606, bz766805. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 15 : rocksndiamonds-3.3.0.1-5.fc15 (2012-1553)
Apply fix for user configuration/cache directory permission issue CVE-2011-4606, bz766805. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
MiniTwitter 0.2-Beta User Options Changer
----------------------------------------------------------------- CMS INFORMATION: +-WEB: http://mt.bioscriptsdb.com/ +-DOWNLOAD: http://sourceforge.net/projects/minitt/ +-DEMO: http://www.bioscripts.net/minitwitter/index.php +-CATEGORY: Social Networking +-DESCRIPTION: Your business needs a...
Crack cafe Group Policy the latest method-vulnerability warning-the black bar safety net
Crack a perverted Internet cafe chargessystem See friends because when you run the Group Policy setting“only run permitted Windows Application”, exit the Group Policy After cannot perform any non-specified feasible program, including the gpedit. the msc also cannot run, all of the pop up"this...
phpScribe 0.9 Configuration Disclosure
....................................................................................................... /Remote Config File Disclosure/ script: phpscribe-0.9 download from:http://downloads.sourceforge.net/phpscribe/phpscribe-0.9.zip?modtime=1071100800&bigmirror=0 vul:...
phpScribe 0.9 (user.cfg) Remote Config Disclosure Vulnerability
Exploit for unknown platform in category web applications =============================================================== phpScribe 0.9 user.cfg Remote Config Disclosure Vulnerability ===============================================================...
Default configuration
Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...
CVE-2008-5397
Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...
Microsoft Windows用户配置文件权限提升漏洞（MS06-051）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的Winlogon在处理用户配置文件时存在漏洞，本地攻击者可能利用此漏洞提升自己在系统中的权限。 在Windows 2000上，Winlogon允许使用无效的路径。如果禁用了SafeDllSearchMode的话，并将特制的DLL置于UserProfile目录中，WinLogon就可能执行DLL代码，从而导致用户的权限提升。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsof...
DSA-681-1 synaesthesia - privilege escalation
Bulletin has no description...
CVE-2005-0072
zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files...
GLSA-200406-12 : Webmin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200406-12 Webmin: Multiple vulnerabilities Webmin contains two security vulnerabilities. One allows any user to view the configuration of any module and the other could allow an attacker to lock out a valid user by sending an...
QPopper 4.0.4 buffer overflow
Affected versions 4.0.3 and 4.0.4. default install. Servers, not processing users configuration file /.qpopper-options are insensible to this bug. popbull.c ----------- int CopyOneBull POP p, long bnum, char name FILE bull; char buffer MAXMSGLINELEN ; BOOL inheader = TRUE; BOOL firstline = TRUE;...
Утечка информации в mIRC (information leakage)
Ошибки реализации протокола DDC позволяют получить сведения о конфигурации пользователя...
CVE-2001-0782
KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file...
Digital Unix 4.0 - MSGCHK MH_PROFILE Symbolic Link
source: https://www.securityfocus.com/bid/3320/info The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege. Because msgchk fails to check file permissions before opening user configuration files in the user's hom...
netscape.title.tag.about.txt
Date: Mon, 24 May 1999 14:24:13 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator JavaScript in security vulnerability There is a security bug in Netscape Communicator 4.6 Win95, 4.07 Linux guess all 4.x versions are affected in the way they treat JavaScript code...