5276 matches found
CVE-2016-7095
Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution...
Design/Logic Flaw
Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution...
CVE-2016-7095
Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution...
User Profile name changes from User Name to "My Documents" or "Documents"
Under certain circumstances, the Desktop.ini file may cause the User Profile folder name on the User Store to change from the User Name to "My Documents". If we delete the "desktop.ini" file in the "My Documents" folder, it changes the folder name back to the correct user name...
ir-rescue - A Windows Batch Script To Comprehensively Collect Host Forensic Data
ir-rescue is a lightweight Windows Batch script that collects a myriad of forensic data from 32-bit and 64-bit Windows systems while respecting the order of volatility and artifacts that are changed with the execution of the script e.g. , prefetch files. It is intended for incident response use a...
Magento Community Edition < 1.9.2.2 Multiple Vulnerabilities
Binary data 9678.prm...
ZendStudio IDE Privilege Vulnerability
Zend Studio is Zend Technologies developed PHP language integrated development environment Integrated Development Environment IDE, which combines PHP and mobile development , and includes some simple mobile application source code. An elevation of privilege vulnerability exists in ZendStudio IDE...
Files.com: Existence of Folder path by guessing the path through response
Enter the support PIN from your test site: 423088 Enter the name of your test site : https://bugbounty5.brickftp.com Enter the subdomain from your test site : https://bugbounty5.brickftp.com ---- Description Suppose there are 2 Folders in the site Test1 Test2 but a member has only Admin permissio...
Abyss Web Server X1 2.11.1 Privilege Escalation
Exploit Title: Abyss Web Server X1 2.11.1 Multiple Local Privilege Escalation Date: 05/10/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Author twitter: @tulpasecurity Vendor Homepage: http://aprelium.com/ Application Download:...
How to Move Replica Metadata
Purpose This article documents the procedure for moving replica metadata between repositories. While moving the replica metadata is not required when changing which repository a replication job uses, moving the metadata will eliminate the need for a lengthy "calculating disk digest" task after th...
DEBIAN-CVE-2016-7162
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
Macro Expert 4.0 Privilege Escalation
Exploit Title: Macro Expert 4.0 Multiple Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.macro-expert.com/ Software Link: http://www.macro-expert.com/download.htm Version: Software...
Macro Expert 4.0 - Multiple Privilege Escalations
Macro Expert 4.0 - Multiple Privilege Escalations Exploit Title: Macro Expert 4.0 Multiple Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.macro-expert.com/ Software Link:...
Storefront - Enable Return to Last Folder
Enable return to last folder...
Icecream Apps Insecure File Permissions / Privilege Escalation
Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...
Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation
Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link:...
Battle.Net 1.5.0.7963 Privilege Escalation
Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link: https://eu.battle.net/account/download/ Version: Version 1.5.0.7963 Tested...
Repetitive SMB Rename Command Attempts
Ransomwares access shared folder in order to encrypt files. Successful exploitation might lead to loss of sensitive data...