5267 matches found
WpQuiz Gain Admin Rightd Exploit found
Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...
FTP Glide cleartext passwords
Passwords are stored in puvlic folder in cleartext...
OUTLOOK 2003: OuchLook
Sunday, May 09, 2004 Outlook 2003 the premier mail client from the company called 'Microsoft' certainly appears to have a lot of security features built into it. Curosry examination shows excellent thought into 'spam' containment, 'security' consideration and many other little 'things'. However...
Explorer / Internet Explorer buffer overflow
Buffer overflow on connection to network folder with oversized share name...
Vcard 2.8 uninstall script problem
Informations : °°°°°°°°°°°°°° Procduct: Vcard Version : 2.9 may other VER Problems : File uninstall & delete the table PHP Code/Location : °°°°°°°°°°°°°°°°°°° /admin/uninstall.php : ------------------------------------------------------------------------ ... ? $step = $HTTPGETVARS'step'; if...
Windows XP .folder files code execution
It's possible to create .folder file launching executable fail on open...
CVE-2003-1265
Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages...
SILLY BEHAVIOR Part II : Internet Explorer 5.5 - 6.0
Thursday, May 1, 2003 The following represents a trivial yet elaborate method of injecting arbitrary html into the "My Computer" zone on win98 using the Internet Explorer series of browsers. The manufacturer, commonly known as "Microsoft" has a done a splendid job of battening down the hatches wi...
CVE-2003-0198
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files...
CVE-2003-0198
CVE-2003-0198 affects Mac OS X versions prior to 10.2.5, where guest users can modify permissions of the DropBox folder and read unauthorized files. The CVSS v2 base metrics indicate a 6.4 score (Medium) with network attack vector, low attack complexity, no authentication, and partial impacts on ...
DEBIAN-CVE-2003-0140
Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...
Dr.Web 4.x - Virus Scanner Folder Name Buffer Overflow (PoC)
Dr.Web 4.x - Virus Scanner Folder Name Buffer Overflow PoC source: https://www.securityfocus.com/bid/7022/info A buffer overflow vulnerability has been reported for Dr. Web virus scanner. The vulnerability is due to insufficient bounds checking when processing folder names. An attacker is able to...
Dr.Web 4.x - Virus Scanner Folder Name Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/7022/info A buffer overflow vulnerability has been reported for Dr. Web virus scanner. The vulnerability is due to insufficient bounds checking when processing folder names. An attacker is able to exploit this vulnerability by creating a malicious folder...
CVE-2002-1740
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name NewFolder parameter...
zerooexploit.txt
According to the vendor's web page , Zeroo is a "simple, small, portable, fast HTTP server". The server is available for Windows, and Linux operating systems. A folder traversal flaw in the server may allow attackers to compromise sensitive information stored on the server's volume. !/usr/bin/per...
Zeroo Folder Traversal Vulnerability
According to the vendor's web page http://lonerunner.cfxweb.net, Zeroo is a "simple, small, portable, fast HTTP server". The server is available for Windows, and Linux operating systems. A folder traversal flaw in the server may allow attackers to compromise sensitive information stored on the...
CVE-2002-1184
The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access Everyone:F and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan hor...
Microsoft Security Bulletin MS02-064: Windows 2000 Default Permissions Could Allow Trojan Horse Program (Q327522)
-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Windows 2000 Default Permissions Could Allow Trojan Horse Program Q327522 Date: 30 October 2002 Software: Windows 2000 Impact: Trojan Horse program execution Max Risk: Moderate...
CVE-2002-0980
The CVE-2002-0980 entry describes a vulnerability in the Web Folder component of Internet Explorer 5.5/6.0 whereby an error message is written to a known temp location. An attacker can inject arbitrary code into that error message and cause execution by referencing the error message file via an m...