482 matches found
Persuasion <= 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
The persuasion WordPress theme was affected by a dl-skin.php mysitedownloadskin Parameter Absolute Path Traversal Remote File Download security vulnerability...
Ruby <= 1.9 Safe Level Multiple Function Restriction Bypass
No description provided by source. source: http://www.securityfocus.com/bid/30644/info Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service: - Multiple security-bypass vulnerabilities occur because of errors in the 'safe leve...
D-Link Dl-704 2.56 b5 IP Fragment Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3306/info The DLink Dl-704 is a DSL/Cable router and switch designed for home network use. A problem has been discovered in the Dl-704 router. Upon receiving a high amount of fragmented IP packets, the router begins to...
DL PayCart <= 1.34 Admin Password Changing Exploit
No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Wordpress Theme Infocus /dl-skin.php 任意文件下载漏洞
No description provided by source...
WordPress Elegance Local File Disclosure
Post Local File Disclosure in wordpress theme Elegance + Date: 07/06/2014 + CWE Number: CWE-98 + Risk: High + Author: Felipe Andrian Peixoto + Dork:inurl:"/wp-content/themes/elegance/" + Vendor Homepage: http://www.elegantthemes.com/ + Contact: [email protected] + Tested on: Windows 7 and...
WordPress Infocus Local File Disclosure
Post Local File Disclosure in wordpress theme Infocus + Date: 07/06/2014 + CWE Number: CWE-98 + Risk: High + Author: Felipe Andrian Peixoto + Dork:inurl:"/wp-content/themes/infocus/" + Vendor Homepage: http://themeforest.net/item/infocus-powerful-professional-wordpress-theme/85486 + Contact:...
CVE-2013-2065
1 DL and 2 Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions...
CVE-2013-2065
CVE-2013-2065 is a taint-check bypass in Ruby's DL and Fiddle native extensions. The initial description notes that Ruby 1.9.x up to 1.9.3 patchlevel 426 and Ruby 2.0 up to patchlevel 195 do not taint-check native functions, allowing context-dependent attackers to bypass safe-level restrictions. ...
CVE-2013-2065: Undefined Security Weakness
1 DL and 2 Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions...
Low: ruby19
Issue Overview: 1 DL and 2 Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions. Affected Packages: ruby19 Issue Correction: Run...
FreeBSD : ruby -- Object taint bypassing in DL and Fiddle in Ruby (79789daa-8af8-4e21-a47f-e8a645752bdb)
Ruby Developers report : There is a vulnerability in DL and Fiddle in Ruby where tainted strings can be used by system calls regardless of the $SAFE level set in Ruby. Native functions exposed to Ruby with DL or Fiddle do not check the taint values set on the objects passed in. This can result in...
ruby -- Object taint bypassing in DL and Fiddle in Ruby
Ruby Developers report: There is a vulnerability in DL and Fiddle in Ruby where tainted strings can be used by system calls regardless of the $SAFE level set in Ruby. Native functions exposed to Ruby with DL or Fiddle do not check the taint values set on the objects passed in. This can result in...
CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle
1 DL and 2 Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions...
CVE-2013-1469
Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...
CVE-2013-1469
Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...
CVE-2013-1469: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...
PT-2013-3152
Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.4.7 Description The issue allows remote attackers to read and delete arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. dot dot in the dl parameter of the install.php file...
PT-2013-1468
Name of the Vulnerable Software and Affected Versions Dl Download Ticket Service versions 0.3 through 0.9 Description The issue allows remote attackers to login as an arbitrary user by supplying an authorization header. Recommendations For versions 0.3 through 0.9, consider disabling the login...
CVE-2011-5253: Improper Authentication
Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header...