9213 matches found
Directory traversal
Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...
CVE-2014-1973
Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...
MGASA-2014-0289 Updated dpkg packages fixes security vulnerabilities
Jakub Wilk discovered that dpkg did not correctly parse C-style filename quoting, allowing for paths to be traversed when unpacking a source package, leading to the creation of files outside the directory of the source being unpacked CVE-2014-0471. Multiple vulnerabilities were discovered in dpkg...
Uzbey: IFXSS (image filename XSS) by creating a new Photo Gallery
Hello team! I think I've found a Stored XSS in the Photo Gallery. To reprodruce the possible vulnerability we must: 1. Login into our account. 2. Go to https://staging.uzbey.com/user/other-albums and click on the "add new album" button. 3. Add random values and any image with this name ---...
NOCC Webmail <= 1.0 (Local Inclusion) Remote Code Execution Exploit
No description provided by source. ?php ---noccw10inclxpl.php 8.22 23/02/2006 NOCC Webmail = 1.0 remote commands execution exploit through arbitrary local inclusion & attachment filename prediction coded by rgod site: http://retrogod.altervista.org - works regardless of any magicquotesgpc setting...
MS IIS 3.0/4.0/5.0 PWS Escaped Characters Decoding Command Execution (4)
No description provided by source. source: http://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before...
Printoxx - Local Buffer Overflow
No description provided by source. Exploit Title: Printoxx Local Buffer Overflow Date: 23 Dec, 2009 Author: sandman, n4mdn4s 4T gmail D0T com Software Link: http://kornelix.squarespace.com/printoxx/, http://kornelix.squarespace.com/storage/downloads/printoxx-2.1.2.tar.gz Version: = 2.1.2 Tested o...
Qualcomm Eudora 5.0/5.1/6.0 Long Attachment Filename Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7026/info Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment filenames are stored in the user's...
Gedit 2.x Filename Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13699/info gEdit is prone to a format-string vulnerability. Exploitation may occur when the program is invoked with a filename that includes malicious format specifiers. Attackers could exploit this issue to corrupt...
Files Desk Pro v1.4 iOS - Local File Inclusion
No description provided by source. Document Title: =============== Files Desk Pro v1.4 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1266 Release Date: ============= 2014-05-16 Vulnerability Laboratory ID VL-ID:...
Dia 0.8x/0.9x Filename Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that...
Microsoft Internet Explorer 5 \'INPUT TYPE=FILE\' Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2045/info One of the ways users submit information to remote websites is through the INPUT type form options. Users can upload files to remote webservers with the input type=FILE option. Due to a design error in the...
TFTPDWIN 0.4.2 - Long Filename Buffer Overflow
No description provided by source. $Id: tftpdwinlongfilename.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
DivX Player <= 6.7.0 SRT File Buffer Overflow PoC
No description provided by source. DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitle file with an overly long subtitle DIVX player will deadly crash with eip overwritted: Replace MOVIEFILENAME by your movie filename .avi !/usr/local/bin/perl my $file=MOVIEFILENAME.srt; my...
Opera 6.0.x/7.0 Long File Name Remote Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7450/info A vulnerability has been reported for Opera versions 7.10 and earlier. The problem is said to occur due to insufficient bounds checking on filename extensions. As a result, it may be possible for an attacker to...
Allied Telesyn TFTP Server 1.9 - Long Filename Overflow
No description provided by source. $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Windows 2000/95/98/NT 4.0 Long Filename Extension Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1259/info Windows 95, 98, NT and 2000 suffer from a number of related buffer overflows that can result in a crash if a filename with an extension longer than 128 characters is accessed. Although arbitrary code could be...
Elxis 'filename' Parameter Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37158/info Elxis is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could ai...
BlazeVideo HDTV Player Pro 6.6 - Filename Handling Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Windows Escalate UAC Protection Bypass
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...