Red Hat Enterprise Linux seunshare Unsafe Implementation

Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utility from policycore-utils intended to make new filesystem...

LocatePC 1.05 (Ligatt Version + Others) - SQL Injection

LocatePC 1.05 Ligatt Version + Others - SQL Injection Affected Software: LocatePC 1.05 Consequences: Arbitrary SELECT queries against the LocatePC and "mysql" database. The LocatePC database contains enough information to stalk all users of the software. It may be possible to instruct the softwar...

openEngine 2.0 100226 - Local File Inclusion / Cross-Site Scripting

SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0 100226; other versions may also be...

openEngine 2.0 Cross Site Scripting / Local File Inclusion

SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0 100226; other versions may also be...

Pecio CMS 2.0.5 Cross Site Scripting

Pecio Content Management System CMS v2.0.5 Cross-Site scripting Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1006 09/10/2010 Issue Discovered 09/21/2010 Vendor Notified 09/21/2010 Vendor Confirmed Solution not available. Class: Cross-Site Scripting Severity:...

Inout Adserver (id) Remote SQL injection Vulnerability

No description provided by source. Inout Adserver id Remote SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i dress eagle on my chest. It's good to be an ALBANIAN Keep my head up high for that flag i die. Im...

Google Chrome Web Script Execution Vulnerabilities - June09

This host has Google Chrome installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromewebscriptexecvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Google Chrome Web Script Execution Vulnerabilities - June09 Authors: Sharath S Copyright:...

PHPAuctionSystem - Multiple Remote File Inclusions

»=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o| | || || || » » || = |||| || || » » =======...

FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability

No description provided by source. Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

OTManager CMS 2.4 - 'Tipo' Remote File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= OTManager 2.4 Remote File Inclusion RFI Vulnerability - Security flaw discovered by Colt7r - CONTACT: colt7r |@| bsdmail.org - Affected Software: OTManager 2.4 - Risk: HIGH - Exploit: http://host/Admin/ADMPagina.php?Tipo=EVIL CODE...

Microsoft MS08-0 1 4 high-risk vulnerability interpretation-vulnerability warning-the black bar safety net

MS08-0 1 4vulnerabilityis Microsoft 3 month release of a high-risk vulnerability, which the official described: if a user opens a specially crafted Excel file, the vulnerability could allow remote code execution. Successful exploitation of these vulnerabilities the attacker can take complete...

Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)

Microsoft Security Bulletin MS08-054 – Critical Vulnerability in Windows Media Player Could Allow Remote Code Execution 954154 Published: September 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Media Player...

DTSA-161-1 samba - privilege escalation

Bulletin has no description...

Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability

Advisory 1 "Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability" $ Author : Morgan ARMAND $ Contact : armandm at epitech dot net $ Vendor URL : http://www.dotclear.net $ Vendor Contacted : 07/04/2008 $ Vendor Status : No response $ Affected Software : Dotclear = 1.2.7.1 $ Severity :...

Security Advisory on RSA Web ID (XSS)

The following security report has been sent to RSA/EMC on the 2/10/2007 and confirmed by them. RSA took action to alert their customers. ----------------------------------------- Description The WebID authentication framework suffers from a flow allowing to steal an authenticated users's session ...

boastMachine <=3.1 SQL Injection Vulnerbility

...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...

Directory Traversal in SafeNet Sentinel Protection Server and Keys Server

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

projectalumni-sqlxss.txt

project-alumni sql injection & xss author : tomplixsee [email protected] -------------------------------------------------------------------------- affected software version : project alumni 1.0.9, 1.0.8, or lower?? download : https://sourceforge.net/projects/project-alumni/ vulnerability...

project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ project alumni = 1.0.9 Remote XSS / SQL Injection Vulnerability ================================================================ project-alumni sql injection & xss author :...

project alumni 1.0.9 - Cross-Site Scripting SQL Injection

project alumni 1.0.9 - Cross-Site Scripting SQL Injection project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9,...