To solve the FCKEDITOR to remove all the upload page how to upload invasion-vulnerability warning-the black bar safety net

Long time no script invasion,today for participating in a match,then the certificate actually needs the money to buy,it is very uncomfortable,Baidu took under its official website,for a security,the result is not successful,because the iis file parsing vulnerability patch on,but learned some of t...

Oracle Linux 4 : xorg-x11 (ELSA-2008-0030)

From Red Hat Security Advisory 2008:0030 : Updated xorg-x11 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 The original...

shopex绕过补丁本地包含漏洞#4

简要描述： 360提交的漏洞，官方修复不严谨 详细说明： http://bbs.webscan.360.cn/forum.php?mod=viewthread&tid=8613&extra=page%3D1 修复前： 修复后（\core\api\shopapi.php）： if isset$REQUEST'appname' $appName = pregreplace'/^a-z0-1/i', '', $REQUEST'appname'; elseif strpos$apiAct, ':' 0 // request plugin api list$appName, $apiAct =...

VulnCheck KEV: CVE-2017-16959

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP...

CVE-2012-6469

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

CVE-2012-6469

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

Error pages can be used to guess local file paths – Opera Security Advisories

Remote web pages should not be able to detect what files a user has on their local machine. Certain error pages do not apply this restriction correctly, allowing web pages to produce an error page where a script can run. The script can then use various events to detect whether files on the user’s...

CVE-2012-3489

CVE-2012-3489 affects PostgreSQL’s core server libxml2 support. The issue arises in the libxml2-based parsing path where the xml_parse function can be manipulated via an XML value that references a DTD or an external entity, enabling remote authenticated users to determine the existence of arbitr...

CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

DEBIAN-CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

UBUNTU-CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

CVE-2012-1586

CVE-2012-1586 affects mount.cifs in cifs-utils 2.6, enabling local users to infer the existence of arbitrary files/directories via the path in the second argument through error messages. The issue is cited across multiple advisories (SUSE, openSUSE, OpenVAS/Nessus feeds, MiracleLinux AXSA:2012-59...

Mandriva Update for cifs-utils MDVSA-2012:069 (cifs-utils)

Check for the Version of cifs-utils OpenVAS Vulnerability Test Mandriva Update for cifs-utils MDVSA-2012:069 cifs-utils Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Scientific Linux Security Update : cifs-utils on SL6.x i386/x86_64 (20120620)

The cifs-utils package contains tools for mounting and managing shares on Linux using the SMB/CIFS protocol. The CIFS shares can be used as standard Linux file systems. A file existence disclosure flaw was found in mount.cifs. If the tool was installed with the setuid bit set, a local attacker...

Scientific Linux Security Update : xorg-x11-server on SL5.x i386/x86_64 (20120221)

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use thi...

CentOS Update for cifs-utils CESA-2012:0902 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 6 : cifs-utils (CESA-2012:0902)

An updated cifs-utils package that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

cifs security update

CentOS Errata and Security Advisory CESA-2012:0902 An updated cifs-utils package that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A...

DEBIAN-CVE-2011-4028

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists...

Code injection

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists...