SimogeoFilemanager Upload File Vulnerability

Exploit for php platform in category web applications RoxTeam Italian Hackers And Security Team 2012 Exploit Title: SimogeoFilemanager Upload File Vulnerability Date: 09/02/2012 Author: hack Author Email: RoxSecurityTeamatcomdothotmail.it Category: webapps Risk: Higt Vendor or Software Link:...

Elevating Privileges Via Windows Installers

There’s an odd bit of behavior that some Windows systems will exhibit when certain kinds of installers are launched, automatically elevating the privileges of the installer process to system-level privileges. In theory, the issue shouldn’t be exploitable because at one point in the process the...

XAMPP WebDAV PHP Upload Vulnerability

This host is running XAMPP and prone to PHP upload vulnerability. OpenVAS Vulnerability Test $Id: gbxamppwebdavphpuploadvuln.nasl 5841 2017-04-03 12:46:41Z cfi $ XAMPP WebDAV PHP Upload Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

How to Move the VBRCatalog Folder

Purpose This article documents the procedure for moving the VBRCatalog folder. Solution VBRCatalog Location Requirements The VBRCatalog folder must be on the root of a given drive letter. Example: C:\VBRCatalog\ or D:\VBRCatalog\ The VBRCatalog cannot be redirected to a CIFS share or mapped netwo...

Secunia Research: DVR Remote ActiveX Control DVRobot Library Loading Vulnerability

====================================================================== Secunia Research 17/11/2011 - DVR Remote ActiveX Control DVRobot Library Loading Vulnerability - ====================================================================== Table of Contents Affected...

WordPress Plugin Zingiri 2.2.3 - ajax_save_name.php Remote Code Execution

WordPress Plugin Zingiri 2.2.3 - ajaxsavename.php Remote Code Execution get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45...

CVE-2010-4963

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

PT-2011-1866 · Php Fusion · Php-Fusion

Name of the Vulnerable Software and Affected Versions: PHP-Fusion affected versions not specified Description: A directory traversal issue in maincore.php allows remote attackers to include and execute arbitrary local files via a .. dot dot in the folder level parameter. This issue has been...

WordPress Plugin Relocate Upload 0.14 - Remote File Inclusion

Exploit Title: Relocate Upload Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/relocate-upload Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/relocate-upload/download/ Version: 0.14 tested --- P...

Input validation

Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as...

PT-2011-3531 · Microsoft · Display Panning Cpl Extension +11

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

Adobe Shockwave Player Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Shockwave Player on Mac OS X. The script logs in via ssh, and searches for adobe products SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

INSECT Pro 2.7 - Penetration testing tool download

INSECT Pro 2.7 - Penetration testing tool download INSECT Pro 2.7 - Ultimate is here! This penetration security auditing and testing software solutionis designed to allow organizations of all sizes mitigate, monitor and manage the latest security threats vulnerabilities and implement active...

Microsoft Data Access Components (MDAC) Insecure Library Loading (MS11-059; CVE-2011-1975)

This is a remote code execution vulnerability. The vulnerability is due to the improper way in which the MDAC handles the loading of library files DLL. A remote attacker could trigger this vulnerability by enticing a victim to accept and open an excel related file on a remote folder SMB or Webdav...

CodeLock Encrypter v2.7 - Multiple Web Vulnerabilities

Document Title: =============== CodeLock Encrypter v2.7 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-04 Vulnerability Laboratory ID VL-ID: ==================================== 102 Product & Service Introduction: =============================== The PHP/HTML Encryptor & The...

FCK each version of a breakout-vulnerability warning-the black bar safety net

Don't know who the copyright- FCKeditor v2.43 版本 FCKeditor/editor/filemanager/browser/default/connectors/php/config.php FCKeditor V2. 6. 6 version fckeditor/editor/filemanager/connectors/asp/config.php View Editor Version FCKeditor/whatsnew.html...

YxShop easy to Shopping Mall 4. 7. 1 version arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Author: Konstantin Tonight happened to come across this app, went to search a bit and found that with people quite a lot. Also no search to the hackers published the program of the vulnerability, so the lower the source code, find the fckeditor folder, look at its directory structure is there wit...

OmniSecure v7.x DLX - Multiple SQL Injection Vulnerabilities

Document Title: =============== OmniSecure v7.x DLX - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 101 Product & Service Introduction: =============================== One Click Folder Protecti...

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

CVE-2011-1338

XnView on Windows is affected by an untrusted search path vulnerability in versions prior to 1.98.1. The flaw arises when loading executables via the Open containing folder path, allowing a local user to gain privileges by placing a Trojan horse .exe in a target folder. Impact: local privilege es...