Apple iPhone Configuration Web Utility目录遍历漏洞

BUGTRAQ ID: 32412 iPhone Configuration Web Utility允许用户使用web浏览器创建、签名和发布配置文件。 Windows平台版本的iPhone Configuration Web Utility的Web接口存在目录遍历漏洞，远程攻击者可以通过向该接口提交恶意请求读取web root之外的任意只读文件。 Apple iPhone Configuration Web Utility 1.0 for Windows Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal

Title ----- DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal Severity -------- High Date Discovered --------------- October 2, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability...

Gentoo Security Advisory GLSA 200811-04 (graphviz)

The remote host is missing updates announced in advisory GLSA 200811-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation/titlebrbr body Company Name : Chilkat Software, Inc.brbr Vulnerable DLL : ChilkatSocket.DLLbrbr DLL's version : 2,3,1,1brbr Object Safety Report : br Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289Cbr...

Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation

Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation ChilkatSocket.DLL Arbitrary File Creation Company Name : Chilkat Software, Inc. Vulnerable DLL : ChilkatSocket.DLL DLL's version : 2,3,1,1 Object Safety Report : Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289C RegKey Safe for Script:...

Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit ===================================================================== ChilkatSocket.DLL Arbitrary Fi...

CVE-2008-5090

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...

Code injection

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...

CVE-2008-5090

The CVE-2008-5090 entry affects Electron Inc. Advanced Electron Forum versions prior to 1.0.7. The vulnerability arises when PHP code embedded in bbcode within the email parameter is processed by preg_replace with the eval switch, allowing remote attackers to execute arbitrary PHP code. This desc...

CVE-2008-5090

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...

Team SHATTER Security Advisory: Oracle Database Multiple SQL Injection vulnerabilities in LTADM

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database Multiple SQL Injection vulnerabilities in LTADM November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes Authentication...

Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database SQL Injection in SYS.DBMSCDCIPUBLISH.ALTERHOTLOGINTERNALCSOURCE November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

Team SHATTER Security Advisory: Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager November 12, 2008 Risk Level: High Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

Dropbear SSH Server svr_ses.childpidsize Remote Overflow

According to its banner, the remote host is runnning a version of Dropbear SSH before 0.47. Such versions contain a buffer allocation error that may allow an authenticated user to gain elevated privileges. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34769;...

ezcms-xss.txt

--------------------------------------------------------- Portal Name: Ez Cms Vendor : http://scriptsez.net Vulnerable File : index.php Dork: Powered by Scriptsez Inc Author : PouyaServer , [email protected] Vulnerability : XSS Cross site scripting...

Anti-Keylogger Elite 3.3.0 (AKEProtect.sys) Privilege Escalation Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ISecSoft, Inc. - http://www.remove-keyloggers.com | // // | | // // | Affecte...

Anti-Keylogger Elite 3.3.0 - AKEProtect.sys Local Privilege Escalation

Anti-Keylogger Elite 3.3.0 - AKEProtect.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ISecSoft, Inc. -...

Anti-Keylogger Elite 3.3.0 (AKEProtect.sys) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ======================================================================== Anti-Keylogger Elite 3.3.0 AKEProtect.sys Privilege Escalation Exploit ========================================================================...

Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ISecSoft, Inc. - http://www.remove-keyloggers.com | // // | | // // | Affected Software: | // // | Anti-Keylogge...

Debian Security Advisory DSA 1649-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 1649-1. OpenVAS Vulnerability Test $Id: deb16491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1649-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...