[TZO-062006] Safe'nVulnerable

Safe'nSec - Insecure File execution and Auto-startup Ref : TZO-062006-SafenSec Author : Thierry Zoller WWW : http://secdev.zoller.lu Article : http://secdev.zoller.lu/research/safensec.htm I. Background "Safe'n'Sec is complex data and user applications protection against threats and vulnerabiliti...

CVE-2006-0785

Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to include and execute arbitrary local files via a direct request with a path parameter with a null character and beginning with 1 '/' slash for an absolute pathname or 2 a drive...

Mirabiliz ICQ 2002/2003/ LITE 4.0/4.1 LONG (DIRECTORY + FILENAME) EXPLOIT

Mirabiliz ICQ 2002/2003/ LITE 4.0/4.1 LONG DIRECTORY + FILENAME EXPLOIT Found this 'bug' about 1 year n a half ago. If u drag and drop a folder containing 1 or more file from your computer into the nick of someone in your contact list it is possible to send a full directory... The possibility to...

Digital Armaments Security Advisory 02.14.2006: Gallery web-based photo gallery remote file execution

Gallery web-based photo gallery remote file execution Digital Armaments advisory is 02.14.2006 http://www.digitalarmaments.com/2006140293402395.html I. Background Gallery is a slick Web-based photo album written using PHP. It is easy to install, includes a config wizard, and provides users with t...

ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload

source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation could allow attackers to upload an...

EUVD-2003-1282

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to 1 ashnews.php and 2 ashheadlines.php...

cmd. asp some deformation-vulnerability warning-the black bar safety net

Here's the asp back door does not mean like those word Trojan, chop off, the ice Fox and the like b/s type, only refers to as cmd. asp or 2005a. asp. First, take a look zzzeva free fso cmd. asp The code is as follows:form method="post" input type=text name="cmd" size=6 0 input type=submit...

Tolva 0.1 - Usermods.php Remote File Inclusion

Tolva 0.1 - Usermods.php Remote File Inclusion source: https://www.securityfocus.com/bid/16000/info Tolva is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the...

Carello detection

Carello.dll was found on your web server. Versions up to 1.3 of this web shopping cart allowed anybody to run arbitrary commands on your server. Note that no attack was performed, and the version number was not checked, so this might be a false alert OpenVAS Vulnerability Test $Id: carello.nasl...

CVE-2005-3381

Multiple interpretation error in Ukrainian National Antivirus UNA 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe...

CVE-2005-3375

Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...

CVE-2005-3373

Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangero...

CVE-2005-3287

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache director...

CVE-2002-1819

CVE-2002-1819 describes a directory traversal vulnerability in TinyHTTPD 0.1.0 that allows remote attackers to read or execute arbitrary files via a ".." in the URL. The cited sources (NVD, CVE list, Red Hat advisory) confirm the existence of this flaw but do not provide patch details or explicit...

firefoxSploit.txt

Firelinking 2 - Proof-of-Concept by mikx var pf = navigator.platform.toLowerCase; if pf.indexOf"win" != -1 var os = "win"; else if pf.indexOf"mac" != -1 var os = "mac"; else var os = "linux" function runDemo // this is an ugly caching workaround document.getElementById'outhtml'.innerHTML = "";...

CVE-2005-1705

gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...

USN-115-1: Kommander vulnerability

Eckhart Wörner discovered that Kommander opens files from remote and possibly untrusted locations without user confirmation. Since Kommander files can contain scripts, this would allow an attacker to execute arbitrary code with the privileges of the user opening the file. The updated Kommander wi...

CVE-2005-1451

The CVE-2005-1451 entry affects Serendipity’s media manager prior to version 0.8. The vulnerability allows remote attackers to upload and execute arbitrary files of type .php or .shtml, enabling possible remote code execution on the affected server. The available documents do not provide addition...

CVE-2005-1304

The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument...

PHPMyVisites 1.3 - 'Set_Lang' File Inclusion

source: https://www.securityfocus.com/bid/13370/info phpMyVisites allows attackers to include arbitrary files. While it has been demonstrated that local files may be included through this vulnerability, there is an unconfirmed possibility of remote file inclusion. Exploitation could disclose loca...