7297 matches found
CVE-2009-3181
CVE-2009-3181 affects Anantasoft Gazelle CMS 1.0. A directory traversal flaw enables remote attackers to overwrite arbitrary files through a .. (dot dot) in the customizetemplate parameter in a direct request to admin/settemplate.php. Impact and exploitability are stated in the CVE description (o...
GNOME glib符号链接任意文件访问漏洞
Bugraq ID: 36313 GLib是一款GTK+和GNOME工程的基础底层核心程序库，是综合用途的轻量级的C程序库。 GNOME glib存在竞争条件问题，可导致任意文件访问或覆盖系统文件。 1，针对想要更改权限的文件或文件夹建立一个符号链接touch /testfile && ln -s /testfile /testlink。 2，使用Nautilus拷贝符号链接到任意地方ctrl+c && ctrl+v。 3，检查符号连接的文件或文件夹的权限。 结果可导致符号连接的文件或文件夹的权限已更改为777drwxrwxrwx user:user。 GNOME glib 2.16.4...
IBM AIX 5.66.1 - _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug
IBM AIX 5.66.1 - LIBINITDBG Arbitrary File Overwrite via Libc Debug !/bin/sh $Id: raptorlibC,v 1.1 2009/09/10 15:08:04 raptor Exp $ raptorlibC - AIX arbitrary file overwrite via libC debug Copyright c 2009 Marco Ivaldi Property of @ Mediaservice.net Srl Data Security Division...
IBM AIX 5.6/6.1 File Overwrite
!/bin/sh $Id: raptorlibC,v 1.1 2009/09/10 15:08:04 raptor Exp $ raptorlibC - AIX arbitrary file overwrite via libC debug Copyright c 2009 Marco Ivaldi Property of @ Mediaservice.net Srl Data Security Division http://www.mediaservice.net/ http://lab.mediaservice.net/ DON'T RUN THIS UNLESS YOU KNOW...
IBM AIX 5.6/6.1 - '_LIB_INIT_DBG' Arbitrary File Overwrite via Libc Debug
!/bin/sh $Id: raptorlibC,v 1.1 2009/09/10 15:08:04 raptor Exp $ raptorlibC - AIX arbitrary file overwrite via libC debug Copyright c 2009 Marco Ivaldi Property of @ Mediaservice.net Srl Data Security Division http://www.mediaservice.net/ http://lab.mediaservice.net/ DON'T RUN THIS UNLESS YOU KNOW...
IBM AIX 5.6/6.1 _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug
Exploit for aix platform in category local exploits ===================================================================== IBM AIX 5.6/6.1 LIBINITDBG Arbitrary File Overwrite via Libc Debug ===================================================================== !/bin/sh $Id: raptorlibC,v 1.1...
Total Commander FTP Client Traversal Arbitrary File Overwrite
The version of Total Commander installed on the remote host fails to sanitize filenames of directory traversal sequences when downloading files via FTP. If an attacker can trick a user on the affected system into visiting a malicious FTP server, he can leverage this issue to write to arbitrary...
CVE-2008-7168
CVE-2008-7168 concerns the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12). The vulnerability is described as an insecure method vulnerability in which an attacker can force the download and overwrite of arbitrary files by supplying crafted arguments to the Update method. The entry notes...
VulnCheck KEV: CVE-2008-7168
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...
Soritong MP3 Plaer 1.0 Buffer Overflow
!/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my $nsh="\xEB\x06\x90\x90"; my $seh="\x47\x30\x01\x10";Player.dll my $nop="\x90" x 2000; m...
SmartVmd Active-X 1.3 File Overwrite
===================================================================== SmartVmd ActiveX 1.3 ActiveXLoadMaskFromFile file overwrite Exploit ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...
Code injection
The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109...
CVE-2008-7111
The Scanner File Utility (aka listener) in Kyocera Mita KM 3.3.0.1 is vulnerable to directory traversal via a .. sequence in requests, allowing remote attackers to upload files to arbitrary locations. CVE-2008-7110 (and related CVEs) describe this behavior enabling arbitrary file write by crafted...
Design/Logic Flaw
Insecure method vulnerability in the Chilkat Socket ActiveX control ChilkatSocket.ChilkatSocket.1 in ChilkatSocket.dll 2.3.1.1 allows remote attackers to overwrite arbitrary files via the SaveLastError method. NOTE: this might be related to CVE-2008-1647...
CVE-2008-6959
Insecure method vulnerability in the Chilkat Socket ActiveX control ChilkatSocket.ChilkatSocket.1 in ChilkatSocket.dll 2.3.1.1 allows remote attackers to overwrite arbitrary files via the SaveLastError method. NOTE: this might be related to CVE-2008-1647...
CVE-2008-6935
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI...
IBM AIX libc MALLOCDEBUG File Overwrite
!/bin/bash \ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability + Refer : securitytracker.com/id?1022261 + Exploit : Affix + Tested on : IBM AIX + Greetz : Mad-Hatter, Atomiku, RTN,...
Directory traversal
Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request...
