Lucene search
+L

3252 matches found

myhack58
myhack58
•added 2007/04/30 12:00 a.m.•30 views

By modifying the characteristics to evade antivirus checks-vulnerability warning-the black bar safety net

Today the rare is I in the school room and RUB into the machine, installed Norton and wheat coffee. Anyway, haven't for these two antivirus ever madefree kill, so just change it for the better. The positioning process on a free, given the feature code location: Norton: the starting offset 000B9A4...

7.2AI score
SaveExploits0
myhack58
myhack58
•added 2007/04/26 12:00 a.m.•18 views

Hackers newbies tutorial of the well known Cookies to the file spoofing-vulnerability warning-the black bar safety net

First, a few basic concepts Cookies deception, is in only for the user to do the Cookies the authentication of the system, by modifying Cookies of the content to obtain the appropriate user permissions to log on. So what is Cookies?, I'm here to give you a professional explanation, Cookies are...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/03/03 12:00 a.m.•40 views

Zend Platform 2.2.1 - 'PHP.INI' File Modification

source: https://www.securityfocus.com/bid/22802/info The Zend Platform is prone to an issue that may let local attackers modify the PHP configuration file 'php.ini'. This issue occurs because the application is installed with an 'inimodifier' program that may be executed by local users and will...

4.4CVSS5.8AI score0.00664EPSS
SaveExploits1
CVE
CVE
•added 2007/02/27 6:00 p.m.•59 views

CVE-2007-1140

The CVE-2007-1140 entry describes a directory traversal vulnerability in edit.php of the pheap application, where an attacker can supply a filename containing .. to read and modify arbitrary files. Affected component: pheap (edit.php). Root cause: improper validation of the filename parameter all...

9.4CVSS6.7AI score0.03108EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/27 12:00 a.m.•7 views

CVE-2007-1140: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a .. dot dot in the filename parameter...

9.4CVSS6AI score0.03108EPSS
SaveExploits2References2
Prion
Prion
•added 2007/02/03 11:28 p.m.•14 views

Race condition

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

3.7CVSS6.5AI score0.00352EPSS
SaveExploits0References14Affected Software1
CVE
CVE
•added 2007/02/03 11:00 p.m.•80 views

CVE-2007-0472

CVE-2007-0472 describes multiple race conditions in Smb4K prior to 0.8.0 that enable a local attacker to escalate privileges or modify sensitive files. The primary issues involve: (1) the removeLockFile path in core/smb4kfileio.cpp allowing manipulation of Smb4K’s lock file to modify arbitrary fi...

3.7CVSS6.2AI score0.00352EPSS
SaveExploits0References14Affected Software1
securityvulns
securityvulns
•added 2007/02/02 12:00 a.m.•48 views

NoMachine NX Server privilege escalation

nxconfigure.sh doesn't check invoking user, allowing configuration file modification...

4.9CVSS3.8AI score0.00345EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/31 12:00 a.m.•9 views

CVE-2007-0467: Undefined Security Weakness

crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/...

6.2CVSS5.9AI score0.01801EPSS
SaveExploits3References1
CVE
CVE
•added 2007/01/16 11:00 p.m.•74 views

CVE-2007-0252

Technical details (affected product/version, vectors, exploitability) are not provided in the supplied documents. Monitor for updates; no public details are available here.

7.5CVSS6.9AI score0.01248EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/16 12:00 a.m.•5 views

CVE-2007-0252: Undefined Security Weakness

Unspecified vulnerability in easy-content filemanager allows remote attackers to upload or modify arbitrary files via unspecified vectors...

7.5CVSS6AI score0.01248EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/12/23 12:00 a.m.•2177 views

Multiple Remote Vulnerabilities in KISGB

Advisory 15 Title: Multiple Remote Vulnerabilities in KISGB Author: 0ozeuso0 Arturo Z. Contact: [email protected] Website: www.diosdelared.com Date: 22/12/06 Risk: critical Vendor Url: http://sourceforge.net/projects/kisgb, http://ravenphpscripts.com Affected Software: Keep It Simple Guest Boo...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/14 12:00 a.m.•5 views

CVE-2006-6304: Undefined Security Weakness

The docoredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to OEXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump...

7.5CVSS5.9AI score0.02548EPSS
SaveExploits0References2
EUVD
EUVD
•added 2006/12/07 5:00 p.m.•13 views

EUVD-2006-6359

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager SFM 0.24a allow remote attackers to use ".." sequences to 1 read arbitrary files via the filename parameter in a download action, 2 delete arbitrary files via the delete parameter, and 3 modify arbitrary files via the...

7.5CVSS7.5AI score0.04176EPSS
SaveExploits1References2
Exploit DB
Exploit DB
•added 2006/12/02 12:00 a.m.•35 views

simple file manager 0.24a - Multiple Vulnerabilities

/\ | flame vrs Simple File Manager | | http://onedotoh.sourceforge.net/ | | Various Vulnerbilities Including: | / /+++++++++++++++++++++++++++++++++++++++++++\ | Using the scripts supplied by the webapp: | | Reading of Arbitrary files | | Deletion of Arbitrary files | | Modification of Arbitrary...

7.5CVSS5.8AI score0.04176EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2006/11/27 3:42 p.m.•22 views

security flaw

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server jbossas 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager...

7.5CVSS6.1AI score0.13854EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/19 12:00 a.m.•6 views

CVE-2006-5406: Undefined Security Weakness

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

3.6CVSS5.8AI score0.00334EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/29 12:00 a.m.•5 views

CVE-2006-4439: Undefined Security Weakness

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

3.6CVSS6AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/23 12:00 a.m.•4 views

CVE-2006-4313: Undefined Security Weakness

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.17L, and 4.7.x up to 4.72F allow attackers to execute the 1 CWD, 2 MKD, 3 CDUP, 4 RNFR, 5 SIZE, and 6 RMD FTP commands to modify files or create and delete directories via unknown vectors...

5CVSS6AI score0.12033EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/23 12:00 a.m.•5 views

CVE-2006-4307: Undefined Security Weakness

Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and CVE-2006-4319...

7.2CVSS6AI score0.00347EPSS
SaveExploits0References1
Rows per page
Query Builder