CVE-2014-8397

Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is located in the same folder as the file being processed...

CVE-2015-1041

Cross-site scripting XSS vulnerability in e107admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107files/ file path in the QUERYSTRING...

CVE-2014-8395

CVE-2014-8395 is a Corel DLL Hijacking vulnerability affecting Corel Painter 2015 (and related Corel products listed in the CORE-2015-0001 advisory). The issue arises from untrusted search path handling: when a user opens a file associated with Corel apps, the application searches the document’s ...

CVE-2014-4634

CVE-2014-4634 describes an unquoted Windows search path vulnerability in EMC Replication Manager (pre-5.5.2) and EMC AppSync (pre-2.1.0). The underlying issue is an unquoted service path used by Windows services, enabling a local attacker to abuse a Trojan horse executable whose name starts with ...

[ MDVSA-2014:162 ] catfish

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:162 http://www.mandriva.com/en/support/security/ Package : catfish Date : September 2, 2014 Affected: Business Server 1.0 Problem Description: Updated catfish package fixes security vulnerability: Untrusted...

CVE-2014-3391

Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.43, 8.5, and 8.7 before 8.71.13 allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LDLIBRARYPATH value, aka Bug I...

CVE-2013-1874

CVE-2013-1874 describes an untrusted search path vulnerability in Chicken's csi, where local users can execute arbitrary code via a Trojan horse .csirc in the current working directory. Affected: Chicken prior to 4.8.2; fix is to upgrade to 4.8.2 or later. The CVSS data indicates local access wit...

WordPress FR0_theme theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress FR0theme theme Arbitrary File Download Vulnerability Author : alieye designer Homepage : http://english.gg.go.kr/ Contact : email protected Risk : High Class: Remote...

CVE-2014-5455

CVE-2014-5455 describes a local privilege-escalation via an unquoted service path in the ptservice service for PrivateTunnel (Windows) prior to v3.0 and OpenVPN Connect (Windows) before v3.1. A crafted program.exe placed in the %SYSTEMDRIVE% folder could be executed with elevated privileges by th...

GnomeHack 1.0.5 - Local Buffer Overflow Exploit

No description provided by source. / linux/debiangnomehackv1.0.5 buffer overflow, by: [email protected]. this will give you an egid=60games shell if gnomehack is sgid=2755 games on debian/2.2, which has gnomehack. this can also be applied to nethack syntax: ./debgnomehack offset alignment. exampl...

Chaton <= 1.5.2 - Local File Include Vulnerability

No description provided by source. + Chaton = 1.5.2 Local File Include Vulnerability + Discovered By: cr4wl3r + Download: Donwload: http://easy-script.com/scripts-dl/chaton-1.5.2.zip + Greetz: opt!x hacker, xoron, cyberlog, mywisdom, irvian, EA ngel, bL4Ck3n91n3, xharu, zvtral, and all my friend ...

GNU GNU bash 1.14 Path Embedded Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/119/info A vulnerability in bash may allow inadvertently running commands embedded in the path to the currently working directory. If an unsuspecting user enters a directory created by some malicious user with embedded...

Muhammad M. Saggaf Seyon 2.14 b Relative Path Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/780/info Seyon uses relative pathnames to spawn two other programs which it requires. It is possible to exploit this vulnerability to obtain the priviliges which seyon runs with. It is installed by default setgid dialer o...

Corel Linux OS 1.0 get_it PATH Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/928/info A component of the Corel Update utility distributed with Corel's Linux OS is vulnerable to a local PATH vulnerability. The binary getit, which is stored in /usr/X11R6/bin, is setuid root installed by default on a...

Pollen CMS 0.6 (index.php, p param) - Local File Disclosure

No description provided by source. Title: Pollen CMS = 0.6 - Local File Disclosure Google Dork: intext:Powered by Pollen CMS Date: 25 Mars 2013 Exploit Author: MizoZ Vendor Homepage: pollencms.com BROKEN Software Link: https://code.google.com/p/pollencms/ Version: 0.6 Tested on: Ubuntu Desktop...

Mandrake 6.x,RedHat 6.x,Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM Path Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/913/info Because of double path vulnerabilities in the binary userhelper and PAM, it is possible to get root locally on RedHat 6.0 and 6.1 systems. Both userhelper and PAM follow .. paths and userhelper allows you to...

1C: Arcadia Internet Store 1.0 Show Path Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2904/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of the components of this...

Path traversal

Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile...

CVE-2014-2591

CVE-2014-2591 affects BMC Patrol for AIX 3.9.00 and is caused by an incorrect RPATH setting that enables untrusted search path exploitation. This allows local users to gain privileges by loading a crafted library. The vulnerability is a local privilege escalation risk due to insecure runtime libr...

Design/Logic Flaw

Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux RHEL 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux RHEL 5 allows local users to gain privileges via a Trojan Horse...