1557 matches found
Debian Security Advisory DSA 588-1 (gzip)
The remote host is missing an update to gzip announced via advisory DSA 588-1. OpenVAS Vulnerability Test $Id: deb5881.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 588-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
DynaWeb Developers MMS Gallery 'id'目录遍历漏洞
DynaWeb Developers MMS Gallery是一款基于PHP的WEB应用程序。 DynaWeb Developers MMS Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于脚本对用户提交的'id'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 DynaWeb Developers MMS Gallery 1.0 目前没有解决方案提供： http://www.mms2web.com/index.php...
[SECURITY] Fedora 7 Update: kdesdk-3.5.8-2.fc7
A collection of applications and tools used by developers, including: cervisia: a CVS frontend kbabel: PO file management kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...
Pole five-stroke input method of a vulnerability-vulnerability warning-the black bar safety net
Find pole five-stroke input method an exploit With this vulnerability you can bypass the system login password, thereby entering the system. Test system: vista Test keyboard version: compiled version: 2007.2.26.0.98 Specific process is this: the elect of this input method, right-click the input...
Microsoft MFC FindFile function heap buffer overflow
Overview A buffer overflow vulnerability in the Microsoft Foundation Class MFC Library could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Foundation Class MFC Library is a Microsoft library that wraps parts of the Windows API in C++ classes. The MFC...
Remote Command Exec (FireFox 2.0.0.5 et al)
By: Nate McFeters nate dot mcfeters -at- gmail Billy BK Rios billy dot rios -at- gmail Tested in FireFox 2.0.0.5 and 3.0a6, Netscape Navigator 9, and Mozilla browser. NOTE These examples were created for WinXP SP2 with no external mail programs installed outlook, notes…etc. If you have an externa...
tutorialcms-bypass.txt
TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php userCP.php PoC:...
TutorialCMS <= 1.01 Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications ======================================================= TutorialCMS = 1.01 Authentication Bypass Vulnerability ======================================================= TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload:...
samba security update
CentOS Errata and Security Advisory CESA-2007:0354-01 Updated samba packages that fix several security flaws are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients...
JC URLShrink 1.3.1 - Remote Code Execution
.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ + + /I N F O\ + | | + | U R L S H R I N K | + | | + | Portal: Urlshrink | + | Version: 1.3.1...
Update: ViewCVS and ViewVC 'checkout view' content type fixation issue
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi! Moritz Naumann wrote: This does not impact how much the rest of my report applies. My findings are now being discussed on the ViewVC developers mailing list 1. They apparently also impact ViewVC. Whether and to which degree what I am reporting c...
PHP import_request_variables() arbitrary variable overwrite
PHP importrequestvariables arbitrary variable overwrite Name Using importrequestvariables you can overwrite $ and $ any php variable. Systems Affected PHP =4.0.7 =5.2.1 Severity High Vendor http://www.php.net/ Advisory http://www.wisec.it/vulns.php?id=10 http://www.wisec.it/vuln10.txt Authors...
Microsoft Visual Studio WmiScriptUtils.dll跨域脚本漏洞
Microsoft Visual Studio是一套微软公司的开发工具套件系列产品。 Microsoft Visual Studio WMIScriptUtils.WMIObjectBroker2 ActiveX控件处理存在问题，远程攻击者可利用漏洞以应用程序进程权限执行任意指令。 Microsoft WMIScriptUtils.WMIObjectBroker2 ActiveX控件存在安全问题，攻击者可以构建恶意页面，诱使用户访问，导致绕过Internet域安全限制，并实例化其他危险的对象，造成 任意指令执行。 Visual Studio 2005 Standard Edition...
JavaScript code can cause the browser attack-vulnerability warning-the black bar safety net
Security researchers have found a Use JavaScript to scan the family and the enterprise network, and attacks on the network server, and the router and printer and other equipment of the method. Researchers say the malicious JavaScript code can be embedded in a Web page, use the browser to browse t...
Code injection
Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...
CVE-2006-2540
Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...
IDS evasion techniques and countermeasures detailed description-vulnerability warning-the black bar safety net
In the network thriving for a few days, the network security issues become increasingly prominent. Network on the Black, White two in the network security of the various fields are engaged in a fierce competition. The black hat community and constantly launch Dodge or across the networkintrusion...
[ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:051 http://www.mandriva.com/security/ Package : gettext Date : February 28, 2006 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The Trustix developers discovered temporary file...
phpRPC Library Remote Code Execution
GulfTech Security Research February 26, 2006 Vendor : Robert Hoffman URL : http://sourceforge.net/projects/phprpc/ Version : phpRPC = 0.7 Risk : Remote Code Execution Description: phpRPC is meant to be an easy to use xmlrpc library. phpRPC is greatly simplified with the use of database/rpc-protoc...
Windows Access Control Demystified
Hello everybody, We have constructed a logical model of Windows XP access control, in a declarative but executable Datalog format. We have built a scanner that reads access-control configuration information from the Windows registry, file system, and service control manager database, and feeds ra...