AceFTP 3.80.3 - 'LIST' Directory Traversal

source: https://www.securityfocus.com/bid/29989/info AceFTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to locations outside of the application's curre...

AceFTP 3.80.3 - LIST Directory Traversal

AceFTP 3.80.3 - LIST Directory Traversal source: https://www.securityfocus.com/bid/29989/info AceFTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to...

DEBIAN-CVE-2007-6199

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy...

security flaw

Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."...

security flaw

Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."...

Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other...

Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other...

3 3 8 9 record of landing Clearance-vulnerability warning-the black bar safety net

Very often, because within the web of trust or vlan, etc. our outside link is not on target 3 3 8 9 terminal, but also impossible to every time you are relying on bounce back door to htran In General, including the network trust any one machine, such as web up direct mstsc to connect to the...

CVE-2006-4155: Undefined Security Weakness

Unspecified vulnerability in functopicthreaded.php aka threaded view mode in Invision Power Board IPB before 2.1.7 21013.60810.s allows remote attackers to "access posts outside the topic."...

security flaw

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox...

[Full-disclosure] Cisco PIX embryonic state machine 1b data DoS

Arhont Ltd - Information Security Arhont Advisory by: Konstantin V. Gavrilenko http://www.arhont.com http://www.hackingciscoexposed.com Arhont ref: arh200601-1 Advisory: Cisco PIX embryonic state machine 1b data DoS Class: design bug? Version: Tested on PIX535, PIX OS ver 6.34 Tested on PIX515E,...

hcXSS.txt

In GOD We Trust Kachal667 Under9round Team KuT Hi, Here's myLrK new advisory about Hosting Controller. Hosting Controller - CSS vulnerabilities Found date : Pri8 Public Date: 02/11/2005 Summary ------- Hosting Controller is an all-in-one administrative hosting tool for Windows. It automates a wid...

Misc information on News server

This script detects if the NNTP server is open to outside, counts the number of groups, and tries to post outside. This channel may been used by virus or trojan. OpenVAS Vulnerability Test $Id: nntpinfo.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Misc information on News server Authors:...

CVE-2005-3163: Undefined Security Weakness

Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root...

CVE-2004-2309: Undefined Security Weakness

Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ dot dot slash in the DIR command...

yawcam 0.2.5 - Directory Traversal

source: https://www.securityfocus.com/bid/13295/info Yawcam is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. GET ................\windows\system.ini HTTP/1.0 GET ................\windows\system.ini HTTP/1.0...

rssh protection bypass

Access outside jail is possible...

security flaw

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path...

Linux VServer Project 1.2x - Chroot Breakout

Linux VServer Project 1.2x - Chroot Breakout / source: https://www.securityfocus.com/bid/9596/info VServer is reported prone to a breakout vulnerability that allows a malicious user to escape from the context of the chrooted root directory of the virtual server. This issue is due to the VServer...

CVE-2001-0263

Gene6 G6 FTP Server 2.0 (BPFTP Server 2.10) is affected by an information-disclosure flaw where attackers can read file attributes outside the FTP root via SIZE and MDTM when the show relative paths option is disabled. Root cause: inadequate restriction of access to attributes outside the FTP roo...