1694 matches found
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution software: site: http://www.digital-scribe.org/ description: "Teachers have full control through a web-based interface. Designed for easy installation and even easier use, the Digital Scribe has been used in thousands of...
DEBIAN-CVE-2005-2772
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via 1 a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and 2 certain arguments when launching third party programs such as...
CVE-2005-1970
Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature...
iDEFENSE Security Advisory 06.14.05: Multiple Vendor Telnet Client Information Disclosure Vulnerability
Multiple Vendor Telnet Client Information Disclosure Vulnerability iDEFENSE Security Advisory 06.14.05 www.idefense.com/application/poi/display?id=260&type=vulnerabilities June 14, 2005 I. BACKGROUND The TELNET protocol allows virtual network terminals to be connected to over the internet. The...
Altris deployment solution AClient privilege escalation
It's possible to launch executable with LocalSystem privileges...
MacOS X Privilege escalation
It's possible to launch application before logon...
Courier-IMAP <= 3.0.2-r1 auth_debug() Remote Format String Exploit
No description provided by source. / courier-imap = 3.0.2-r1 Remote Format String Vulnerability exploit Author: ktha at hush dot com Tested on FreeBSD 4.10-RELEASE with courier-imap-3.0.2 Special thanks goes to andrewg for providing the FreeBSD box. Greetings: all the guys from irc pulltheplug co...
Executable launch via Windows Medial Player from Microsoft Outlook/Outlook express
Via Windows Media file wma it's possible to open HTML file in local security zone, from html it's open chm, from chm - executable...
Обход защиты Identix Bio Logon 3 (protection bypass)
Имеется возможность запустить приложение до входа пользователя...
Обход защиты от запуска приложений с помощью Internet Explorer в MacOS (protection bypass)
Можно запустить запрещенное приложение установи его для обработки определенного типа URL...
Citrix Client Access Verification
Your professional opinions are appreciated. About a month ago I had posted the below as a Citrix Client Access Advisory and got several responses to the fact that it either it was not a valid vulnerabilty or that it was a default configuration problem. which may be true. but consider this. The...
Linux news 27.09.00
Linux 2.2.18pre2aa2 Andrea Arcangeli выпустил следующую версию своей модификации ядра Linux для high-end серверов. Патч содержит поддержку до 4Gb памяти на платформе Intel, поддержку до 2Tb памяти на Alpha, улучшения VM для машин с большим объемом оперативки, Raw IO, улучшения SMP планировщика,...
