cups: latent privilege escalation vulnerability

The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the 1 /var/cache/cups/remote.cache or 2 /var/cache/cups/job.cache file...

DEBIAN-CVE-2010-2431

The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the 1 /var/cache/cups/remote.cache or 2 /var/cache/cups/job.cache file...

Dolphin 2.0 (.elf) Local Daniel Of Service

Exploit for windows platform in category dos / poc ========================================== Dolphin 2.0 .elf Local Daniel Of Service ========================================== Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a fil...

Dolphin 2.0 - '.elf' Local Denial of Service

Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a file by 'OpenCTRL+O' that contains 9999 chars 'A', so dolphin should crash. PoC / Code: $buffer = strrepeat'A', 99999; Create 9999 chars'A'.. iffileputcontents'crash.elf', $buffer...

Samba security vulnerabilities

smbclient format string vulnerability, ability to change file permissions if file is already open...

SonicWALL Global Security Client privilege escalation

SYSTEM privileges are not dorpped on file open dialog...

POP Peeper 3.4.0.0 .html file Universal SEH Overwrite Exploit

No description provided by source. POP Peeper 3.4.0.0 .html file Universal SEH Overwrite Exploit Exploit By Stack Mountassif Moad How to use : file Open message or Ctrl + O Select The .html file ...... Connect With 5555 Port C:\ncnc -v 127.0.0.1 5555 DNS fwd/rev mismatch: localhost !=...

POP Peeper 3.4.0.0 - '.html' Universal Overwrite (SEH)

POP Peeper 3.4.0.0 .html file Universal SEH Overwrite Exploit Exploit By Stack Mountassif Moad How to use : file Open message or Ctrl + O Select The .html file ...... Connect With 5555 Port C:\ncnc -v 127.0.0.1 5555 DNS fwd/rev mismatch: localhost != stack-a4eeb2267 localhost 127.0.0.1 5555 ? ope...

快客电邮(QuarkMail)远程命令执行漏洞

快客电邮（QuarkMail）是北京雄智伟业科技公司推出的电子邮件系统，被广泛用于各个领域的电子邮件解决方案，其webmail部分使用perl cgi编写，但是80sec在其系统中发现一个重大的安全漏洞，导致远程用户可以在邮件系统上以当前进程身份执行任意命令，从而进一步控制主机或者系统。 QuarkMail错误地使用perl的open函数以打开文件，实现模板等功能，但是其对用户传入的参数没有做有效的过滤，从而导致一个命令执行漏洞。 登录进入系统之后访问如下URL...

vim multiple security vulnerabilities

Code execution on file open...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...

Design/Logic Flaw

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...

CVE-2006-2154

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...

CVE-2006-2154

EMC Retrospect for Windows is affected: versions 6.5 prior to 6.5.382, 7.0 prior to 7.0.344, and 7.5 prior to 7.5.1.105 do not drop privileges before opening files, allowing a local user to execute arbitrary code via the File>Open dialog. Root cause: failure to drop privileges prior to file ac...

CVE-2006-2154

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...

[UNIX] FACE CONTROL CMS vis.pl Directory Traversal

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-2579

Nortel Contivity VPN Client V0501.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box...

Nortel Contivity VPN Client privilege escalation

File open dialog exllows to execute file with LocalSystem privileges...

Security Update for Microsoft Office 2016 (KB5002058) 32-Bit Edition

A security vulnerability exists in Microsoft Office 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...