Energizer DUO USB battery charger software allows unauthorized remote system access

Overview The software available for the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. Description Energizer DUO is a USB battery charger. An optional Windows application that allows the user to view the battery charging status has been...

CVE-2010-0680

CVE-2010-0680 – ZeusCMS 0.2: A directory traversal in index.php allows remote attackers to include and execute arbitrary local files via the page parameter. This can impact confidentiality, integrity, and availability (CVSS v2 base score 7.5). Affected product/version: ZeusCMS 0.2. Connected reco...

CVE-2010-0157

CVE-2010-0157 is a Local File Inclusion (directory traversal) vulnerability in the Joomla! Bible Study component (com_biblestudy) version 6.1. An attacker can craft a .. in the controller parameter of studieslist to index.php to cause arbitrary local file inclusion, potentially enabling remote co...

CVE-2009-4435

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALSnlang parameter to 1 mod/poll.php and 2 mod/new.php...

[ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

CVE-2009-4211

The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...

Code injection

The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...

Directory traversal

Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

Design/Logic Flaw

Incomplete blacklist vulnerability in browser/download/downloadexe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by 1 .mht and 2 .mhtml files, which are...

Directory traversal

Directory traversal vulnerability in ls.php in LittleSite aka LS or LittleSite.php 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a U...

NCTAVIFile File Creation / Execution

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

CVE-2008-7054

Technical details about CVE-2008-7054 are not publicly provided in the connected documents. The entries reiterate the vulnerability description without product/version specifics. Monitor for updates from official advisories to obtain concrete impact, affected components, and fixes.

The latest remote file code execution exploit method-vulnerability warning-the black bar safety net

about them on the Internet search Uebimiau Webmail Address followed by /uebimiau/admin/editor. php? load=config is the person holding the encryption /uebimiau/index. php? cmd=id All is Foreign,,, master can play。。。。。。。 Vulnerability published Time 2 0 0 9 to 6. 1 2...

CVE-2009-2386

Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method...

Directory traversal

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

Directory traversal

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

Linux kernel multiple security vulnerabilities

CIFS client buffer overflow, Xen DoS, nfs4 files execution...

CVE-2009-1774

The CVE-2009-1774 entry describes a Directory Traversal in Strawberry 1.1.1 affecting the plugin path plugins/ddb/foot.php, exploitable via a …/ file parameter to example/index.php to include and execute local files. The issue is triggered by crafting a path with .. (dot dot); details note that t...

Directory traversal

Directory traversal vulnerability in cmsdetect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the include parameter...

CVE-2008-6726

Multiple directory traversal vulnerabilities in CMScout 2.06, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the bit parameter to 1 admin.php and 2 index.php, different vectors than CVE-2008-3415...