435 matches found
ORACLE to build the data file WriteWebShell collection-vulnerability warning-the black bar safety net
author: kj021320 Reprint please indicate the source In fact, similar to the ORACLE such a powerful database, really not necessary with this soil the way SQLJ stored procedure write file can also be forced to helpless the other machine does not support SQLJ and UTLFILE package is also to kill? Tha...
MP4 decoder vulnerability mining techniques-vulnerability warning-the black bar safety net
| ! --- MP4 decoder vulnerability discovery techniques For the format vulnerability is most prone to is an infinite loop, so for this vulnerability in the search method, my personal approach is person meat jokes, the attention of those that function inside the use of the cycle of operation of the...
HP-UX Update for Process Resource Manager (PRM) HPSBUX01065
Check for the Version of Process Resource Manager PRM OpenVAS Vulnerability Test HP-UX Update for Process Resource Manager PRM HPSBUX01065 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Baran CMS 1.0 - Arbitrary .ASP File Upload File Disclosure SQL Injection Cross-Site Scripting Cookie Manipulation
Baran CMS 1.0 - Arbitrary .ASP File Upload File Disclosure SQL Injection Cross-Site Scripting Cookie Manipulation 0x01 Informations : Name : Baran Cms Version : 1.0 Personal site : http://www.baran-cms.ir $$ : 50$ Vul : Arbitrary ASP File Upload/DB/SQL/XSS/CM Credit : Aria-Security Team Website :...
Debian DSA-1557-1 : phpmyadmin - insufficient input sanitising
Several remote vulnerabilities have been discovered in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1924 Attackers with CREATE table permissions were allowed to read arbitrary files...
CVE-2008-0766: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...
Debian Security Advisory DSA 1404-1 (gallery2)
The remote host is missing an update to gallery2 announced via advisory DSA 1404-1. OpenVAS Vulnerability Test $Id: deb14041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1404-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities
Exploit for unknown platform in category dos / poc ================================================================= HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities ================================================================= Advisory: ///////// There is another remotely...
FreeBSD : gallery2 -- multiple vulnerabilities (9b718b82-8ef5-11dc-8e42-001c2514716c)
Gallery project reports : Gallery 2.2.3 addresses the following security vulnerabilities : - Unauthorized renaming of items possible with WebDAV reported by Merrick Manalastas - Unauthorized modification and retrieval of item properties possible with WebDAV - Unauthorized locking and replacing of...
DSA-1404-1 gallery2 - privilege escalation
Bulletin has no description...
CVE-2002-2310
Technical details about CVE-2002-2310 are not publicly available in the provided documents. No affected products/versions or remediation specifics are described here. Monitor for updates from connected sources.
CVE-2003-1423
Vulnerability summary: Petitforum stores the liste.txt data file under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information (e-mails and encrypted passwords). Root cause: improper access restrictions on the data file within the web root...
gallery2 -- multiple vulnerabilities
Gallery project reports: Gallery 2.2.3 addresses the following security vulnerabilities: Unauthorized renaming of items possible with WebDAV reported by Merrick Manalastas Unauthorized modification and retrieval of item properties possible with WebDAV Unauthorized locking and replacing of items...
CVE-2007-4272
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via 1 unspecified vectors where an attacker's umask is honored, 2 /etc/ld.so.preload, 3 certain "cron data file locations", and other unspecified vectors possibly involvi...
Design/Logic Flaw
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via 1 unspecified vectors where an attacker's umask is honored, 2 /etc/ld.so.preload, 3 certain "cron data file locations", and other unspecified vectors possibly involvi...
CVE-2006-4745
ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header...
CVE-2006-4745
The CVE-2006-4745 entry concerns ScaryBear PocketExpense Pro 3.9.1, where an internally recorded key protects a data file whose contents are stored in plaintext. The underlying issue allows local users to bypass authentication and access the file by modifying a value in the file header. This is a...
CVE-2006-4745: Undefined Security Weakness
ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header...