36 matches found
[SECURITY] Fedora 25 Update: sqlite-3.14.2-3.fc25
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
[SECURITY] Fedora 24 Update: sqlite-3.13.0-2.fc24
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
VulnCheck KEV: CVE-2017-0022
Microsoft XML Core Services MSXML improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site...
CVE-2016-7462
The Suite REST API in VMware vRealize Operations aka vROps 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization...
[SECURITY] [DSA 3676-1] unadf security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3676-1 [email protected] https://www.debian.org/security/ Luciano Bello September 24, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3676-1 (unadf - security update)
Tuomas Rasanen discovered two vulnerabilities in unADF, a tool to extract files from an Amiga Disk File dump .adf: CVE-2016-1243 A stack buffer overflow in the function extractTree might allow an attacker, with control on the content of a ADF file, to execute arbitrary code with the privileges of...
Xen libxl toolstack library denial of service vulnerability
Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. The Xen ibxl toolstack library fails to properly release the file mappings made for the kernel and initial virtual disks when managing multiple domains in the same process, allowi...
[SECURITY] Fedora 22 Update: sqlite-3.8.9-1.fc22
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
DEBIAN-CVE-2013-2186
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance...
commons-fileupload: Arbitrary file upload via deserialization
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance...
USB Disk And File Transfer 1.3.1 Local File Inclusion
Title: ====== USB Disk & File Transfer v1.3.1 - File Include Arbitrary File Upload Vulnerability Date: ===== 2013-02-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=881 VL-ID: ===== 881 Common Vulnerability Scoring System: ==================================== 5.3...
USB Disk & File Transfer v1.3.1 - File Include Vulnerability
Document Title: =============== USB Disk & File Transfer v1.3.1 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=881 Release Date: ============= 2013-02-19 Vulnerability Laboratory ID VL-ID: ===================================...
Sky classroom file upload vulnerability-vulnerability warning-the black bar safety net
Brief description: Allow the upload of dangerous file type,this system is still a lot of Open the network course website, as shown in Figure, landing it, and now SkyDrive. Upload a PHP file, the web site didn't filter PHP file. ! 1 8-300x166. png ! 1 8-300x166. png ! 1 8-300x166. png After enteri...
Top secret: three steps to teach you easily steal a VMware virtual machine and its data-vulnerability warning-the black bar safety net
Whether to remember a virtualized e-mail server or the payment system? If you have access to the virtualization environment administrator privileges, you can easily get into the virtualization environment, and steal all the data without leaving any traces. From the Data Center to steal a physical...
Opera 7.22 - File Creation and Execution (WebServer)
Opera 7.22 - File Creation and Execution WebServer !/usr/bin/perl Sample code of "Opera 7 Arbitrary File Auto-Saved Vulnerability." This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small...
