Arbitrary File Read Vulnerability in CMSHead

CMSHead is a website management system with PHP+Mysql architecture developed by Nanchong Hongda Network Co. CMSHead there are arbitrary file reading vulnerability, the vulnerability stems from the background management of the file management failed to access the file verification, attackers can u...

CVE-2013-3315

The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role before executing a command, which allows authenticated users to gain privileges via unspecified vectors...

T-Com Speedport ADSL router unauthorized access

Constant Cookie value is set for Web access verification...

[SA21706] Cerberus Helpdesk "ticket" Parameter Arbitrary Ticket Access

TITLE: Cerberus Helpdesk "ticket" Parameter Arbitrary Ticket Access SECUNIA ADVISORY ID: SA21706 VERIFY ADVISORY: http://secunia.com/advisories/21706/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of sensitive information WHERE: From remote SOFTWARE: Cerberus Helpdesk 2.x...

MERCUR Mailserver buffer overflow

Buffer overflow in configuration interface TCP/32000 access verification. Multiple overflows in IMAP, POP3, SNTP protocol...

CVE-2002-0170

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration...

CVE-2002-0170

CVE-2002-0170 affects Zope 2.2.0 through 2.5.1. The underlying issue is improper verification of access for objects with proxy roles, which could allow some users to access documents contrary to the intended configuration. Several sources (GHSA/OSV, CVE records, and related advisories) corroborat...

Microsoft Windows 'Account Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Account Operators' group. Members of this group can create or modify local user accounts but can not modify or create administrative accounts or edit user rights. C Tenable Network Security, Inc. include"compat.inc"...

Microsoft Windows 'Backup Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Backup Operators' group. Members of this group can logon to the remote host and perform backup operations read/write files but have no administrative rights. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Windows 'Replicator' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Replicator' group. Members of this group can replicate or copy files or directories within a domain. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10906; scriptversion"1.20";...