CVE-2019-17312: Improper Limitation of a Pathname to a Restricted Directory

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user...

PT-2019-15075

Name of the Vulnerable Software and Affected Versions SugarCRM versions prior to 8.0.4 SugarCRM versions 9.x prior to 9.0.2 Description The issue allows directory traversal in the file function by a regular user. Recommendations For SugarCRM versions prior to 8.0.4, update to version 8.0.4 or...

PT-2019-14638 · Marc Q · Libwav

Name of the Vulnerable Software and Affected Versions: marc-q libwav versions through 2017-04-20 Description: The issue is related to a NULL pointer dereference in the gain file function at wav gain.c. Recommendations: For versions through 2017-04-20, at the moment, there is no information about ...

PT-2018-15457

Name of the Vulnerable Software and Affected Versions Mini-XML version 2.12 Description The issue is a stack-based buffer overflow in the scan file function in mxmldoc.c. Recommendations For Mini-XML version 2.12, at the moment, there is no information about a newer version that contains a fix fo...

OpenSC Infinite Recursion Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. An infinite recursion vulnerability exists in iaseccselectfile in libopensc/card-iasecc.c in OpenSC prior to 0.19.0-rc1 when processing responses from IAS-ECC cards. An attack...

Privilege escalation

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the configfile function...

GitBucket 4.23.1 - Remote Code Execution

GitBucket 4.23.1 - Remote Code Execution Exploit Title: GitBucket 4.23.1 Unauthenticated RCE Date: 21-05-2018 Software Link: https://github.com/gitbucket/gitbucket Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: remote 1...

CVE-2017-1000249

An issue in file was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 Oct 2016 lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 Aug 2017...

PT-2017-7555

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary PHP code via a URL in the file path parameter to "upload/admin2". This is a result of a PHP remote file inclusion vulnerability in the get file...

CVE-2017-1000249

An issue in file was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 Oct 2016 lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 Aug 2017...

CVE-2017-1000249

An issue in file was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 Oct 2016 lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 Aug 2017...

PT-2017-8937

Name of the Vulnerable Software and Affected Versions Dropbox lepton version 1.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a crafted jpeg file. This is due to a problem in the process file function located in lepton/jpgcoder.cc...

PHP file include vulnerability attack and Defense combat-vulnerability warning-the black bar safety net

Summary PHP is a very popular Web development language on the Internet many Web applications are using PHP development. And in the use of PHP development of Web applications, PHP file include vulnerability is a Common Vulnerability. The use of PHP file include vulnerabilities intrusion website is...

RIPS Scanner 0.10 File Disclosure

--------------------------------------- Author : L3b-r1'z Title : Rips-Scanner File Disclosure Date\Time : 8/6/2012 Email : [email protected] Site : Sec4Ever.com & Exploit4arab.com Google Dork : allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Version : 0.10...

Pivot t参数目录遍历漏洞

BUGTRAQ ID: 30012 Pivot是一款基于WEB的帮助用户维护动态站点的工具。 Pivot的search.php文件没有正确过滤对t参数输入的便返回用于显示文件： ... // Set the template for the tags page if !isset$PivotVars't' || empty$PivotVars't' if isset$Weblogs$Currentweblog'extratemplate' && $Weblogs$Currentweblog'extratemplate'!="" $template =...

openmotif libUil buffer overflows

Multiple buffer overflows in libUil libUil.so in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the 1 diagissuediagnostic function in UilDiags.c and 2 opensourcefile function in UilSrcSrc.c...

Gaming Directory 1.0 - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 5 April 2008...

Gaming Directory 1.0 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Gaming Directory 1.0 catid Remote SQL Injection Vulnerability ================================================================...

fapersianhack-sql.txt

FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://fascript.com/fapersianhack.zip Injection Adress : http://Sitename/ph/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with...

China computer education web site management system 3. 0 vulnerability analysis-vulnerability warning-the black bar safety net

In the/edit/downfile. asp has the following code: Copy code !-- include file="fsoconfig. asp" - !-- include file="checklogin. asp" - % call downloadFileRequest"path" function downloadFilestrFile strFilename = server. MapPathstrFile Response. Buffer = True Response. Clear Set s = Server...