3118 matches found
KVIrc 3.4.0 Virgo Remote Format String Exploit PoC
Exploit for unknown platform in category dos / poc ================================================== KVIrc 3.4.0 Virgo Remote Format String Exploit PoC ================================================== KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remo...
KVIrc 3.4.0 - Virgo Remote Format String (PoC)
KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start exploitation\nPress Cancel to skip exploitation"; if an...
Symantec Altiris Deployment Solution客户端GUI本地权限提升漏洞
BUGTRAQ ID: 31766 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris客户端GUI的主窗口有一个隐藏按键，该按键的标题为“命令提示符”。点击这个按键会导致GUI试图用以下命令行参数调用CreateProcess： c:\Program Files\Altiris\AClient\cmd.exe...
Symantec Altiris Deployment Solution Local Access Elevation of Privilege in Client GUI
SUMMARY A local access elevation of privilege issue has been identified and resolved in the Symantec Altiris Deployment Solution Client GUI. Successful exploitation could result in unauthorized local system access on a client system. Severity Medium Remote Access adjacent network | No ---|--- Loc...
CVE-2008-4339
Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...
Design/Logic Flaw
Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...
CVE-2008-4339
Summary: CVE-2008-4339 affects Symantec Veritas NetBackup Server/Enterprise Server (versions 5.1 before MP7, 6.0 before MP7, 6.5 before 6.5.2). The vulnerability is in the Java Administration GUI (jnbSA) and allows remote authenticated users to gain privileges via unknown attack vectors related t...
CVE-2008-4339
Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...
Symantec Vertias NetBackup Java管理GUI远程特权提升漏洞
BUGTRAQ ID: 31221 CNCAN ID：CNCAN-2008092514 Symantec Veritas NetBackup是一款数据备份应用解决方案。 Symantec Veritas NetBackup包含的Java管理GUIjnbSA存在漏洞，远程授权非特权攻击者可以利用漏洞以应用程序权限执行任意命令。 恶意用户需要通过验证并登录到GUI来利用此漏洞。 Symantec Veritas NetBackup Server 6.5 Symantec Veritas NetBackup Server 6.0 Symantec Veritas NetBackup Serve...
[SECURITY] Fedora 9 Update: amarok-1.4.10-1.fc9
Amarok is a multimedia player with: - fresh playlist concept, very fast to use, with drag and drop - plays all formats supported by the various engines - audio effects, like reverb and compressor - compatible with the .m3u and .pls formats for playlists - nice GUI, integrates into the KDE look, b...
Code injection
Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors...
CVE-2008-2794
CVE-2008-2794 describes a local privilege escalation affecting the Symantec Altiris Notification Server Agent GUI. The vulnerability is tied to Altiris Notification Server Agent 6.x (before 6.0 SP3 R8) and allows local users to gain privileges via unspecified attack vectors. The connected sources...
Symantec Altiris Notification Server Agent GUI Local Elevation of Privilege
SUMMARY A non-privileged user can leverage the Symantec Altiris Notification Server Agent Graphical User Interface GUI to gain privileged access to the system. Severity Medium Remote Access adjacent network | No ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No...
[SECURITY] Fedora 8 Update: system-config-network-1.5.10-1.fc8
This is the GUI of the network configuration tool, supporting Ethernet, Wireless, TokenRing, ADSL, ISDN and PPP...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web GUI in SAP Web Application Server WAS 7.0, Web Dynpro for ABAP aka WD4A or WDA, and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under bc/gui/sap/its/webgui/...
CVE-2008-2421
CVE-2008-2421 concerns a Cross-site Scripting (XSS) vulnerability in the Web GUI of SAP Web Application Server (WAS) 7.0, affecting Web Dynpro for ABAP (WD4A/WDA) and Web Dynpro for BSP. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the default URI unde...
SAP Web Application Server crossite scripting
Crossite scripting with /sap/bc/gui/sap/its/webgui/...
Altiris Deployment Solution Agent < 6.9.176 Multiple Local Vulnerabilities
The version of the Altiris Deployment Solution Agent installed on the remote host reportedly is affected by several issues : - A local user could access a privileged command prompt via the Agent's user interface CVE-2008-2290. - A local user could leverage a GUI tooltip to access a privileged...
