Code Execution Vulnerability in FineCMS Frontend file and param parameters

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the name and param parameters in the frontend of FineCMS version 5.0.7, which allows remote attackers to execute arbitrary code without logging in...

FortiGate OS Version 4.x - 5.0.7 - SSH Backdoor

FortiGate OS Version 4.x - 5.0.7 - SSH Backdoor. CVE-2016-1909. Remote exploit for hardware platform !/usr/bin/env python SSH Backdoor for FortiGate OS Version 4.x up to 5.0.7 Usage: ./fgtsshbackdoor.py import socket import select import sys import paramiko from paramiko.py3compat import u import...

autofs security, bug fix and enhancement update

5.0.7-54.0.1 - add autofs-5.0.5-lookup-mounts.patch Orabug:12658280 Bert Barbe 1:5.0.7-54 - bz1263508 - Heavy program map usage can lead to a hang - fix out of order call in program map lookup. - Resolves: rhbz1263508 1:5.0.7-53 - bz1238573 - RFE: autofs MAPHASHTABLESIZE description - update...

Fortinet FortiAnalyzer / FortiManager < 5.0.7 Multiple Unspecified XSS (FG-IR-14-033)

The remote host is running a version of FortiAnalyzer or FortiManager prior to 5.0.7. It is, therefore, affected by multiple unspecified cross-site scripting vulnerabilities due to the web UI not properly validating input before returning it to users. An attacker can exploit these vulnerabilities...

Adobe Reader 'WWWLaunchNetscape' Buffer Overflow Vulnerability - Linux

Adobe Reader is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

OrbiTeam BSCW 5.0.7 Metadata Information Disclosure

Advisory: Metadata Information Disclosure in OrbiTeam BSCW RedTeam Pentesting discovered an information disclosure vulnerability in OrbiTeam's BSCW collaboration software. An unauthenticated attacker can disclose metadata about internal objects which are stored in BSCW. Details ======= Product:...

RealVNC < 5.0.7 Multiple Local Privilege Escalations

The version of RealVNC on the remote host is earlier than 5.0.7. As such, it is affected by multiple privilege escalation vulnerabilities : - A local privilege escalation vulnerability exists that is triggered by a specially crafted argument to the vncserver-x11 binary on UNIX / Linux...

Nullsoft Winamp < 5.0.7 IN_CDDA.dll Remote Buffer Overflow

Binary data 2426.prm...

[NEWS] Lotus Domino Bindsock Arbitrary File Creation Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

CVE-2001-0604

CVE-2001-0604 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to induce a denial of service by sending URL requests (&gt;8 KB) containing a large number of '/' characters. The issue is due to how such requests are processed, enabling a partial availability impac...