523 matches found
[SECURITY] Fedora 17 Update: ktimer-4.10.5-1.fc17
KTimer is a little tool to execute programs after some time...
[SECURITY] Fedora 18 Update: ktimer-4.10.5-1.fc18
KTimer is a little tool to execute programs after some time...
[SECURITY] Fedora 18 Update: ktimer-4.10.4-1.fc18
KTimer is a little tool to execute programs after some time...
PT-2013-2122
Name of the Vulnerable Software and Affected Versions Mutiny versions prior to 5.0-1.11 Description The issue allows remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service via multiple directory traversal vulnerabilities in the...
CVE-2013-0136: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service file deletion or renaming via 1 the uploadPath parameter...
Vulnerability in "Fujitsu Desktop Update" (for Windows)
Hi @ll, Fujitsu's update utility "Fujitsu Desktop Update" see http://support.ts.fujitsu.com/DeskUpdate/Index.asp, which is factory-preinstalled on every Fujitsu Siemens PC with Windows, has a vulnerability which allows the execution of a rogue program in the security context of the current user...
PT-2013-2691
Name of the Vulnerable Software and Affected Versions Google Chrome versions 25.0.1364.97 and earlier on Linux Google Chrome versions 25.0.1364.99 and earlier on Mac OS X Description The issue is related to the improper handling of pathnames during copy operations, which could facilitate the...
CVE-2012-6460
Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...
PT-2013-1953
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.67 Opera versions 12.x prior to 12.02 Description The issue allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...
CVE-2012-2244: Undefined Security Weakness
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243...
PT-2012-3903
Name of the Vulnerable Software and Affected Versions Mahara versions 1.4.x through 1.4.4 Mahara versions 1.5.x through 1.5.3 Description The issue allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. It can also be exploited without...
CVE-2012-4203: Undefined Security Weakness
The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark...
PT-2012-5246
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 17.0 Description The issue concerns the New Tab page in Mozilla Firefox, where JavaScript code executed by bookmarklets uses a privileged context. This allows remote attackers to run arbitrary programs if they...
PT-2012-4417
Name of the Vulnerable Software and Affected Versions MarkAny ContentSAFER versions prior to 1.4.2012.508 Samsung KIES versions prior to 2.3.2.12074 13 13 Description The issue allows remote attackers to download and execute an arbitrary program onto a client machine via a crafted HTML document,...
CVE-2012-2990: Improper Control of Generation of Code
The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.120741313, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and...
Permanent Reverse TCP Backdoor for IPhone and IPad
Security Expert from Coresec explains the use of a Permanent Reverse TCP Backdoor "sbd-1.36" for IPhone and IPad developed by Michel Blomgren. sbd is a Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. sbd features...
CVE-2011-4786: Improper Control of Generation of Code
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...
CVE-2011-4837: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs...
FFFTP < 1.98b Untrusted Search Path Vulnerability - Windows
FFFTP is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
