10415 matches found
Unfixed XSS vulnerability at archive-it.org
Security researcher nullbyt3, has submitted on 12/07/2010 a cross-site-scripting XSS vulnerability affecting archive-it.org, which at the time of submission ranked 115248 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is current...
Pandora FMS <= 3.1 Multiple Input Validation Vulnerabilities - Active Check
Pandora FMS is prone to an authentication bypass vulnerability as well as the following input-validation vulnerabilities: - A commandinjection vulnerability - Multiple SQL injection SQLi vulnerabilities - A remote file include RFI vulnerability - An arbitrary PHP code execution vulnerability -...
CVE-2010-3798
Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted xar archive...
DEBIAN-CVE-2010-3798
Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted xar archive...
Heap overflow
Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted xar archive...
CVE-2010-3798
Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted xar archive...
Woltlab Burning Board 2.3.4 - File Disclosure
Woltlab Burning Board 2.3.4 - File Disclosure Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability Date: 2010-11-12 Author: SFX Version: 2.3.4 CVE : N/A After you've used the Exploit to get the admin account: goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder import:...
CVE-2010-3709
The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...
CVE-2010-3709
The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...
CVE-2010-4155
Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...
CVE-2010-3160
Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...
Design/Logic Flaw
Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...
CVE-2010-3160
Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...
CVE-2010-3160
Archive Decoder ≤1.23 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse executable in the current working directory. The issue arises from insecure loading of executables during file extraction. Affected product is Archive D...
Joomla Calendrier Remote File Inclusion
========================================================= Joomla Component comcalendrier RFI Vulnerability ========================================================= +Title : Joomla Component comcalendrier RFI Vulnerability +Author : josalijoe +Contact : [email protected] +Home :...
Archive Decoder may insecurely load executable files
Overview Archive Decoder may use unsafe methods for determining how to load executables .exe. Archive Decoder is a file extraction software that supports multiple file en extracting files. Archive Decoder contains an issue with the file search path, which may insecurely load executables. Makoto...
JVN#68536660: Archive Decoder may insecurely load executable files
Archive Decoder is a file extraction software that supports multiple file formats. Archive Decoder loads certain executables .exe when extracting files. Archive Decoder contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary cod...
JBoss JMX - Console Deployer Upload and Execute (Metasploit)
$Id: jbossmaindeployer.rb 10754 2010-10-19 22:24:33Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
[security bulletin] HPSBMA02583 SSRT100070 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote URL Redirection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02518794 Version: 1 HPSBMA02583 SSRT100070 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote URL Redirection NOTICE: The information in this Security Bulletin should be acte...
RarCrack 0.2 Buffer Overflow POC
Exploit for windows platform in category dos / poc ================================ RarCrack 0.2 Buffer Overflow POC ================================ !/usr/bin/env ruby overflow.rb / / / / / / / / / / / / // / / / / / / / // / \ / / / // / , / // / // / // // / // ||/// //// Title: RarCrack...