3684 matches found
SOL6924 - Insertion of special characters in URL path circumvents Accessibility Scope and Access Control Lists
It is possible to bypass the Deny list, configured in the Accessibility Scope section located on the Portal Access: Web Applications: Master Group Settings page, by inserting certain special characters into a URL path. In FirePass version 6.0, this issue also applies to the Deny list configured...
SOL6922 - Decimal-encoded IP address circumvents Accessibility Scope
It is possible to bypass the Deny list configured in the Accessibility Scope section of the Portal Access: Web Applications: Master Group Settings page using a URL with a decimal-encoded IP address. When you log in to the FirePass Webtop, you can enter a URL into the Webtop Address Bar if the...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)
Exploit for hardware platform in category remote exploits =================================================================== Barracuda Spam Firewall /cgi-bin/previewemail.cgi?file=/mail/mlog/../tmp/backup/periodicconfig.txt.tmp https:///cgi-bin/previewemail.cgi?file=/mail/mlog/../../bin/ls%20/|...
atutor151pl2.txt
ATutor 1.5.1pl2 SQL Injection / Remote commands execution software: site: http://www.atutor.ca/ description : "ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and adaptability in mind." if magicquotesgpc off - SQL INJECTION vulnerable code in...
osTicket setup.php Accessibility
The target is running at least one instance of an improperly secured installation of osTicket and allows access to setup.php. Since that script does not require authenticated access, it is possible for an attacker to modify osTicket's configuration using a specially crafted call to setup.php to...
fkey[v0.0.2]: local/remote file accessibility exploit.
nothing major, just killing some time and strolled across this project on freshmeat. original version: http://fakehalo.us/xfkey.c --------------------- exploit: xfkey.c ---------------------- / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo...
fkey 0.0.2 - Local File Accessibility
/ fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-like daemon for accessing remote files i...
Movable Type mt.cfg Information Disclosure
The remote host is running Movable Type. The file 'mt.cfg' is publicly accessible, and contains information that should not be exposed. %NASLMINLEVEL 70300 This script was written by Rich Walchuck rich.walchuck at gmail.com See the Nessus Scripts License for details Changes by Tenable: -...
[VulnWatch] [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability
Microsoft Windows Utility Manager Vulnerability April 13, 2004 Risk Level: High Summary: A local elevation of privileges vulnerability exists on the Windows Utility Manager that allows to any user to take complete control over the operating system. Versions Affected: All products in the Windows...
[Full-Disclosure] PrimeBase SQL Database server cleartext password storage.
PrimeBase SQL Database server cleartext password storage. Vapid Labs Security Note 10/20/03 The PrimeBase SQL Database Server 4.2 stores passwords in clear text, and based on the installation users umask settings maybe readable by all local users. From the readme.txt file: "The Admin server will...
CVE-2003-0350
The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 ListView does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback...
CVE-2003-0350
The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 ListView does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback...
CVE-2003-0350
CVE-2003-0350 affects Windows 2000’s Accessibility Utility Manager (ListView). The vulnerability arises from improper handling of Windows messages in the ListView control, enabling a local attacker to cause arbitrary code execution via a malicious Shatter-style message that references a user-cont...
Microsoft Utility Manager Local Privilege Escalation
NGSSoftware Insight Security Research Advisory Name: Microsoft Utility Manager Local Privilege Escalation Systems Affected: Windows 2000 SP3 Severity: Medium Risk Vendor URL: http://www.microsoft.com Authors: Chris Paget [email protected] Chris Anley [email protected] Sherief Hammad...
MDKSA-2000:070 - cups update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: November 16th, 2000 Advisory ID: MDKSA-2000:070 Affected versions: 7.2 Problem Description: A problem existed with previous versions of CUPS that made CUPS printers accessible from...
Windows help & learning
None None...
Update for Microsoft Silverlight (KB4481252)
This update to Silverlight improves security, reliability, accessibility support, startup performance, enhances line-of-business support and includes several fixes to better support rich internet applications. This update is backward compatible with web applications built using previous versions ...
Arabic
Arabic...