409 matches found
MP4 decoder vulnerability mining techniques-vulnerability warning-the black bar safety net
| ! --- MP4 decoder vulnerability discovery techniques For the format vulnerability is most prone to is an infinite loop, so for this vulnerability in the search method, my personal approach is person meat jokes, the attention of those that function inside the use of the cycle of operation of the...
HP-UX Update for Process Resource Manager (PRM) HPSBUX01065
Check for the Version of Process Resource Manager PRM OpenVAS Vulnerability Test HP-UX Update for Process Resource Manager PRM HPSBUX01065 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Baran CMS 1.0 - Arbitrary .ASP File Upload File Disclosure SQL Injection Cross-Site Scripting Cookie Manipulation
Baran CMS 1.0 - Arbitrary .ASP File Upload File Disclosure SQL Injection Cross-Site Scripting Cookie Manipulation 0x01 Informations : Name : Baran Cms Version : 1.0 Personal site : http://www.baran-cms.ir $$ : 50$ Vul : Arbitrary ASP File Upload/DB/SQL/XSS/CM Credit : Aria-Security Team Website :...
Debian DSA-1557-1 : phpmyadmin - insufficient input sanitising
Several remote vulnerabilities have been discovered in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1924 Attackers with CREATE table permissions were allowed to read arbitrary files...
Debian Security Advisory DSA 1404-1 (gallery2)
The remote host is missing an update to gallery2 announced via advisory DSA 1404-1. OpenVAS Vulnerability Test $Id: deb14041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1404-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities
Exploit for unknown platform in category dos / poc ================================================================= HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities ================================================================= Advisory: ///////// There is another remotely...
FreeBSD : gallery2 -- multiple vulnerabilities (9b718b82-8ef5-11dc-8e42-001c2514716c)
Gallery project reports : Gallery 2.2.3 addresses the following security vulnerabilities : - Unauthorized renaming of items possible with WebDAV reported by Merrick Manalastas - Unauthorized modification and retrieval of item properties possible with WebDAV - Unauthorized locking and replacing of...
DSA-1404-1 gallery2 - privilege escalation
Bulletin has no description...
CVE-2002-2310
Technical details about CVE-2002-2310 are not publicly available in the provided documents. No affected products/versions or remediation specifics are described here. Monitor for updates from connected sources.
CVE-2003-1423
Vulnerability summary: Petitforum stores the liste.txt data file under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information (e-mails and encrypted passwords). Root cause: improper access restrictions on the data file within the web root...
gallery2 -- multiple vulnerabilities
Gallery project reports: Gallery 2.2.3 addresses the following security vulnerabilities: Unauthorized renaming of items possible with WebDAV reported by Merrick Manalastas Unauthorized modification and retrieval of item properties possible with WebDAV Unauthorized locking and replacing of items...
Design/Logic Flaw
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via 1 unspecified vectors where an attacker's umask is honored, 2 /etc/ld.so.preload, 3 certain "cron data file locations", and other unspecified vectors possibly involvi...
CVE-2007-4272
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via 1 unspecified vectors where an attacker's umask is honored, 2 /etc/ld.so.preload, 3 certain "cron data file locations", and other unspecified vectors possibly involvi...
CVE-2006-4745
ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header...
CVE-2006-4745
The CVE-2006-4745 entry concerns ScaryBear PocketExpense Pro 3.9.1, where an internally recorded key protects a data file whose contents are stored in plaintext. The underlying issue allows local users to bypass authentication and access the file by modifying a value in the file header. This is a...
4D WebStar < 5.3.5 IMAP Mac OS Client DoS
Binary data 3249.prm...
PostgreSQL < 8.0.3 Incorrect Function Declaration
Binary data 2876.prm...
CVE-2005-0229
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt...
CVE-2002-1656
CVE-2002-1656 affects X-News (x_news) 1.1 and earlier, a PHP-based news management system that stores user IDs and MD5 password hashes in a world-readable file (db/users.txt). The vulnerability enables an attacker to authenticate as other users by obtaining a password hash (e.g., via sniffing or ...