Fonality trixbox CE 2.6.1 - 'langChoice' Local File Inclusion (Metasploit)

$Id: trixboxlangchoice.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FTP Voyager 15.2.0.11 Directory Traversal

Vulnerability ID: HTB22625 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpvoyager.html Product: FTP Voyager Vendor: Rhino Software http://www.ftpvoyager.com/ Vulnerable Version: 15.2.0.11 and Probably Prior Versions Vendor Notification: 22 September 2010...

IBM WebSphere Application Server 6.0 < 6.0.2.43 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0 before Fix Pack 43 for 6.0.2 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - The Web Container does not properly handle long filenames, which could cause it to respond with the incorrect file,...

Design/Logic Flaw

The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar...

Potential attack vector using attachments

Suspicious handling of attachment uploads with filenames containing quotes the quoted ended up being repeated and semicolons semicolon and all subsequent characters were stripped from filename...

Potential attack vector using attachments

Suspicious handling of attachment uploads with filenames containing quotes the quoted ended up being repeated and semicolons semicolon and all subsequent characters were stripped from filename...

[ MDVSA-2010:167 ] perl-libwww-perl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:167 http://www.mandriva.com/security/ Package : perl-libwww-perl Date : August 31, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A...

FTPx Corp FTP Explorer Directory Traversal Vulnerability

This host is installed with FTPx Corp FTP Explorer and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodftpexploredirtraversalvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ FTPx Corp FTP Explorer Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

Adobe ColdFusion - Directory Traversal

Adobe ColdFusion - Directory Traversal Working GET request courtesy of carnal0wnage: http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en LLsecurity added another admin page filename: "/CFIDE/administrator/enter.cfm"...

Buffer overflow

Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplacemode value that is not properly handled when constructing the filenames of the backup files...

Ruby on Windows ARGF.inplace_mode Variable Local Overflow

Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplacemode value that is not properly handled when constructing the filenames of the backup files...

CVE-2010-2466

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not properly prevent downloading of database backups, which allows remote attackers to obtain sensitive information via requests for full.dar files with predictable filenames...

CVE-2010-0777

The Web Container in IBM WebSphere Application Server WAS 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading...

Debian Security Advisory DSA 2034-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 2034-1. OpenVAS Vulnerability Test $Id: deb20341.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2034-1 phpmyadmin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

DSA-2034-1 phpmyadmin - several vulnerabilities

Bulletin has no description...

Directory traversal

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0501

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

cpio: Heap-based buffer overflow by expanding a specially-crafted archive

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...

cpio: Heap-based buffer overflow by expanding a specially-crafted archive

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...

cpio: Heap-based buffer overflow by expanding a specially-crafted archive

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...