WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability...

Buffer overflow

Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728...

CVE-2007-1195

Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728...

CVE-2007-1195

Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728...

EUVD-2007-1192

Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728...

CVE-2007-1195

Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728...

CVE-2007-1195

CVE-2007-1195 denotes multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 that allow remote attackers to execute arbitrary code via unspecified vectors. The description also notes possible overlap with CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728. The connected documents provide no c...

[SECURITY] Fedora Core 6 Update: gnucash-2.0.5-1.fc6

GnuCash is a personal finance manager. A check-book like register GUI allows you to enter and track bank accounts, stocks, income and even currency trades. The interface is designed to be simple and easy to use, but is backed with double-entry accounting principles to ensure balanced books...

Kisisel Site 2007 SQL注入漏洞

Kisisel Site 2007是一款基于ASP的WEB应用程序。 Kisisel Site 2007不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'forum.asp'脚本对用户提交的'forumid'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 Kisisel Site 2007 目前没有解决方案提供： http://www.aspindir.com/goster/4693...

CA personal firewall multiple privilege escalations

Multiple vulnerabilities in HIPS Core KmxStart.sys and HIPS Firewall KmxFw.sysdrivers...

[CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities

Title: CAID 34818: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities CA Vuln ID CAID: 34818 CA Advisory Date: 2007-01-22 Discovered By: Reverse Mode Impact: Local attacker can gain escalated privileges. Summary: Multiple vulnerabilities have been discovered in CA Personal Firewal...

CVE-2007-0081

Sunbelt Kerio Personal Firewall SKPF 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory...

CVE-2007-0081

Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246 (and possibly other versions) is affected by CVE-2007-0081, where local users can place a Trojan horse iphlpapi.dll in the installation directory to compromise the product. The NVD CVSS2 base score is 6.8 (MEDIUM) with high impact on conf...

CVE-2007-0081

Sunbelt Kerio Personal Firewall SKPF 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory...

Kerio Personal Firewall IPHLPAPI.DLL本地权限提升漏洞

Kerio Personal Firewall是一款流行的个人防火墙应用程序。 Kerio Personal Firewall装载文件存在问题，本地攻击者可以利用漏洞提升特权。 系统库iphlpapi.dll安装在系统目录中，需要此DLL的SKPF服务先尝试在安装目录中查找iphlpapi.dll，如果在此目录没有找到，会尝试在系统目录中找，如果攻击者在SKPF中的安装目录中建立恶意的iphlpapi.dll文件，在SKPF服务初始化时被操作系统装载到SKPF服务中，导致恶意代码在SKPF服务中执行。 Sunbelt Software Kerio Personal Firewall...

Kerio可注入伪造iphlpapi DLL漏洞

Kerio Personal Firewall是一款个人桌面系统防火墙。 Kerio Personal Firewall处理程序相关组件的加载时存在漏洞，本地攻击者可能利用此漏洞提升权限或使防火墙失效。 Kerio Personal Firewall在加载相关的库文件iphlpapi.dll时，首先从软件的安装目录搜索，如果搜索不到才从操作系统目录加载，而且软件的安装目录是可写的，本地攻击者可以创建伪造的DLL文件，防火墙服务在初始化时加载执行其中的代码，导致执行攻击者的任意指令。 Kerio Personal Firewall 4.3.268 Kerio Personal Firewa...

Kerio Personal Firewall 4.3 - 'IPHLPAPI.dll' Local Privilege Escalation

source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromi...

Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation

Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level...

CVE-2006-6826

Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors related to a "Security leak."...

CVE-2006-6826

Technical details are not publicly provided in the supplied documents for CVE-2006-6826. Monitor for updates to see affected products, vulnerable components, impact, and remediation guidance.