Chilkat Software FTP2 ActiveX Code Execution

obj.UnlockComponent"suntzu"; //needed for file transfer operations, type whatever here obj.Port=21; //configure ftp connection obj.Hostname="192.168.0.1"; //change here obj.ConnectTimeout=5; obj.Passive=1; var x; x=obj.Connect; if x==1 x = obj.GetFile"suntzu.txt","c:/Users/All...

Pointter PHP Content Management System 1.0 Privilege Escalation

'Pointter PHP Content Management System' Unauthorized Privilege Escalation CVE-2010-4332 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Content Management System' authentication system which allows for...

JVN#62736872: Vulnerability in Epson printer driver installer where access permissions are changed

When printer drivers provided by Epson are installed, the access permissions for the folder that contains program files C:\Program Files are changed. As a result, users that do not have permission to access that folder can gain access to that folder. Impact A user that does not have permission to...

Pro cart 2.3.5 Backup listen folder Vulnerability

Exploit for php platform in category web applications ================================================= Pro cart 2.3.5 Backup listen folder Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Audacity <= 1.3 Beta Multiple Local Vulnerabilities

Audacity = 1.3 Beta Multiple Local Vulnerabilities Name Audacity Vendor http://audacity.sourceforge.net Versions Affected = 1.3 Beta Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-29 X. INDEX I. ABOUT THE...

K2Editor may insecurely load executable files

Overview K2Editor may use unsafe methods for determining how to load executables .exe. K2Editor is a text editor. K2Editor loads certain executables .exe when opening the folder that contains the text file that is being edited. K2Editor contains an issue with the file search path, which may...

Tastydir <= 1.2 (1216) Multiple Vulnerabilities

Exploit for php platform in category web applications =============================================== Tastydir = 1.2 1216 Multiple Vulnerabilities =============================================== Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version...

Tastydir Folder Creation / Cookie Forgery / Chmod

Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platform PHP file management system which allows yo...

Tastydir 1.2 (1216) - Multiple Vulnerabilities

Tastydir 1.2 1216 - Multiple Vulnerabilities Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platfo...

Robo-FTP 3.7.3 Directory Traversal

Vulnerability ID: HTB22627 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinroboftp.html Product: Robo-FTP Vendor: Serengeti Systems Incorporated http://www.robo-ftp.com Vulnerable Version: 3.7.3 and Probably Prior Versions Vendor Notification: 27 September 2010...

Ease Jukebox 1.30 - Denial of Service

Ease Jukebox 1.30 - Denial of Service Exploit Title :Ease Jukebox 1.30 Dos vulnerability Software : Ease Jukebox 1.30 Software link : http://www.mymusictools.com/all-in-onejukebox9/easejukebox4040.htm Autor : Sweet Email : [email protected] Software version : 1.30 Tested on : WinXP sp3 ENG vm t...

Ease Jukebox 1.30 - Denial of Service

Exploit Title :Ease Jukebox 1.30 Dos vulnerability Software : Ease Jukebox 1.30 Software link : http://www.mymusictools.com/all-in-onejukebox9/easejukebox4040.htm Autor : Sweet Email : [email protected] Software version : 1.30 Tested on : WinXP sp3 ENG vm thx to Milw0rm.com , JF - Hamst0r -...

Directory Traversal Vulnerability in FreshFTP

Vulnerability ID: HTB22628 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinfreshftp.html Product: FreshFTP Vendor: FreshWebMaster http://www.freshwebmaster.com Vulnerable Version: 5.36 and Probably Prior Versions Vendor Notification: 27 September 2010 Vulnerability Typ...

FTP Voyager 15.2.0.11 Directory Traversal

Vulnerability ID: HTB22625 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpvoyager.html Product: FTP Voyager Vendor: Rhino Software http://www.ftpvoyager.com/ Vulnerable Version: 15.2.0.11 and Probably Prior Versions Vendor Notification: 22 September 2010...

Mandriva Update for pcmanfm MDVA-2010:192 (pcmanfm)

Check for the Version of pcmanfm OpenVAS Vulnerability Test Mandriva Update for pcmanfm MDVA-2010:192 pcmanfm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2010-1820

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

Krojac CMS SQL Injection

Exploit Title: Krojach CMS SQL Injection Vulnerabilities Date found: 6.2010 Author: MikiSoft Email: [email protected] CMS Software Site/Link: http://www.krojac.com Versions affected: All Edit: In latest version this is fixed now... Google dorks: intext:"Skrojio i sašio Krojač" ; intext:"Made...

CVE-2010-1820: Improper Authentication

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

osDate Shell Upload

==================================================== osDate Upload Shell Vulnerability uploadvideos.php ==================================================== Date : 05/08/2010 Author : Xa7m3d Tested ON : ubuntu 9.10 MY Team : Currently no Software Link : http://www.tufat.com/script39.htm E-mail :...

osDate - uploadvideos.php Arbitrary File Upload

osDate - uploadvideos.php Arbitrary File Upload ==================================================== osDate Upload Shell Vulnerability uploadvideos.php ==================================================== Date : 05/08/2010 Author : Xa7m3d Tested ON : ubuntu 9.10 MY Team : Currently no Software Li...