Directory traversal

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...

CVE-2010-1820

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

CVE-2010-2007

Multiple cross-site request forgery CSRF vulnerabilities in LetoDMS formerly MyDMS 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use 1 op/op.EditUserData.php, 2 op/op.UsrMgr.php, 3 out/out.RemoveVersion.php, 4 op/op.RemoveFolder.php, 5...

Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit (patch)

No description provided by source. Blog with a detailed description: http://www.skullsecurity.org/blog/?p=285 And the patch itself: http://www.skullsecurity.org/blogdata/cadaver-0.23.2-h4x.patch mkdir cadaver-h4x cd cadaver-h4x wget http://www.skullsecurity.org/blogdata/cadaver-0.23.2-h4x.patch...

cPanel 11.18.3 - List Directories and Folders Information Disclosure

cPanel 11.18.3 - List Directories and Folders Information Disclosure source: https://www.securityfocus.com/bid/28300/info cPanel is prone to an information-disclosure vulnerability. An attacker can exploit this issue to determine programs that are running on the affected server and to view folder...

Unwanted Access to File System via Import Pages Functionality

security vulnerability found in Confluence 2.5.6 Space administrator can use the "Import Pages from Disk" feature to browse the server file system by pointing the importer at "/" folder or any other folder. Because this folder doesn't contain expected files, an error message is displayed,...

CVE-2007-3968

index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name...

Hacking tricks build antivirus search within a folder-bug warning-the black bar safety net

Since installing the antivirus software and then each time they open there hack tool folder, it will frequently pop-up alarm window, and one missed to press“OK”, the hard to accumulate the program will be“gone with the wind”. Several times down, my“memory food”has almost disappeared lazy to do, i...

Microsoft Power Point Temporary Internet Files folder access

Script within HTML can access Temporary Internet Files folder directly...

APG Technology ClassMaster - Unauthorized Folder Access

APG Technology ClassMaster - Unauthorized Folder Access source: https://www.securityfocus.com/bid/13604/info ClassMaster is reportedly affected by a vulnerability that may allow attackers to gain unauthorized access to users' folders. An attacker is able to gain complete access to user shares ove...

Security bug in .NET Forms Authentication

Hi We believe we have discovered a serious flaw in .NET forms authentication when used to secure sub folders. A standard forms authentication setup requires the presence of "web.config" to set the authentication method and login procedure. The presence of this file prevents access to certain file...

OUTLOOK 2003: OuchLook

Sunday, May 09, 2004 Outlook 2003 the premier mail client from the company called 'Microsoft' certainly appears to have a lot of security features built into it. Curosry examination shows excellent thought into 'spam' containment, 'security' consideration and many other little 'things'. However...

CVE-2003-1265

Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages...

CVE-2001-0837

DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in 1 temp.html, 2 the log folder, and 3 the PhoneBook folder...

All Users startup folder left open if unattended install and OEMP reinstall=1

About a month ago I posted the following to the win2ksecadvice list. However, I received no response. I thought I'd try again since I consider this problem to be pretty serious since it will allow any user to introduce a code stream on another user. I recently noticed a problem with Windows 2000...

CVE-1999-0824

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...