CVE-2009-0014

CVE-2009-0014 affects Apple Mac OS X 10.5.6 Folder Manager, where the Downloads folder is recreated with insecure default permissions, allowing local users to read the Downloads folder and bypass restrictions. The issue is a local vulnerability tied to the folder creation permissions, as describe...

Yet Another NOCC <= 0.1.0 Local File Inclusion Vulnerability

No description provided by source. Yet Another NOCC 0.1.0 = Local File Inclusion Vulnerabilities YANOCC is a simple and fast webmail client which can handle POP3, SMTP, and IMAP servers. YANOCC is based on NOCC's code and is written with PHP4. It features multi-language support, MIME attachments,...

Directory traversal

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read...

Upload command to Startup folder

Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...

Upload command to Startup folder

Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...

Upload command to Startup folder

Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...

Upload command to Startup folder

Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...

Viart shopping cart 3.5 - Multiple Vulnerabilities

=============================================================== !vuln ViArt Shopping Cart v3.5 is prone to multiple remote vulnerabilities. Earlier versions may also be affected. ===============================================================...

phpGreetCards XSS / File Upload

................................................................................................... remote shell upload/xss script: phpGreetCards download from:http://www.w2b.ru/download/phpGreetCards.zip www.site.com/path/index.php?mode=select&category shell:...

CVE-2008-5769: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 folder parameter to mailCompose.php or the 2 daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party...

Remote code execution

The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in HousecallActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. NOTE: this can be leveraged for code execution by writing to a Startup folder...

CVE-2008-2434

The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in HousecallActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. NOTE: this can be leveraged for code execution by writing to a Startup folder...

phpGreetCards XSS/Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ===================================================== phpGreetCards XSS/Arbitrary File Upload Vulnerability =====================================================...

phpGreetCards - Cross-Site Scripting / Arbitrary File Upload

................................................................................................... remote shell upload/xss script: phpGreetCards download from:http://www.w2b.ru/download/phpGreetCards.zip www.site.com/path/index.php?mode=select&category shell:...

phpGreetCards - Cross-Site Scripting Arbitrary File Upload

phpGreetCards - Cross-Site Scripting Arbitrary File Upload ................................................................................................... remote shell upload/xss script: phpGreetCards download from:http://www.w2b.ru/download/phpGreetCards.zip...

[SECURITY] Fedora 8 Update: roundcubemail-0.2-5.beta.fc8

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 10 Update: roundcubemail-0.2-4.beta.fc10

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"

Script : Cpanel 11.x bug : language.php edite file exploit=Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" safemode off , modsecurity off Disable functions : All NONE ,access root folder ?php / Deadly Script by Super-Crystal bypass Cpanel fantastico www.arab4services.ne...

Exodus 0.10 (uri handler) Arbitrary Parameter Injection Exploit

No description provided by source. !-- Exodus v0.10 remote code execution exploit by Nine:Situations:Group::strawdog This uses the "-l" argument to overwrite a file inside Microsoft Help and Support Center folders oh rgod... Firstly run netcat in listen mode to drop the vbscript shell run this...

Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability

No description provided by source. Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...