Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability

====================================================================== Secunia Research 24/03/2010 - Pulse CMS Arbitrary File Deletion Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability

====================================================================== Secunia Research 24/03/2010 - Pulse CMS Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability

====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability

====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...

Cross site scripting

Cross-site scripting XSS vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter...

CVE-2010-1080

Cross-site scripting XSS vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter...

CVE-2010-1080

CVE-2010-1080 is a confirmed XSS vulnerability in Pulse CMS 1.2.2, triggered via the f parameter in view.php, allowing remote injection of arbitrary script or HTML. The NVD lists a base score of 4.3 (Medium) with network attack vector and no confidentiality/availability impact, only partial integ...

CVE-2010-1080

Cross-site scripting XSS vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter...

DEBIAN-CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

Pulse CMS 1.2.2 Cross Site Scripting

Exploit Title: Pulse cms XSS Vulnerabilities Date: 19-02-2010 Author: Th3 RDX Software Link: No Download Link Version: 1.2.2 Tested on: Demo Site category: webapp Code : -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Team I.C.W | Team W.O.I | Andhra Hackers...

Pulse cms XSS Vulnerabilities

No description provided by source. Exploit Title: Pulse cms XSS Vulnerabilities Date: 19-02-2010 Author: Th3 RDX Software Link: No Download Link Version: 1.2.2 Tested on: Demo Site category: webapp Code : -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Team I.C.W |...

Pulse cms XSS Vulnerabilities

Exploit for unknown platform in category web applications ============================= Pulse cms XSS Vulnerabilities ============================= Exploit Title: Pulse cms XSS Vulnerabilities Date: 19-02-2010 Author: Th3 RDX Software Link: No Download Link Version: 1.2.2 Tested on: Demo Site...

SuSE 11 Security Update : Xine (SAT Patch Number 643)

Specially crafted 4x movie files could cause an integer overflow in xine-lib. CVE-2009-0698 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

Joomla Component com_gameserver 1.0 (id) SQL Injection Vulnerability

No description provided by source. , . | | o | | |,---.,---., .,---.,---.,---.,---.,---|,---.,---.| .,---.|/ ---'| || || |,---|| ,---|| | ||---'| | || || \ | ---'---|---|---^---'---^ ---'---' ---' ' ---'---' o Joomla Component comgameserver 1.0 id SQL Injection Vulnerability --== Author ==-- +...

Mandrake Security Advisory MDVSA-2009:162 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:162. OpenVAS Vulnerability Test $Id: mdksa2009162.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:162 java-1.6.0-openjdk Authors: Thomas Reinke Copyright:...

Pulse Audio setuid Privilege Escalation

!/bin/bash pulseaudio=which pulseaudio workdir="/tmp" workdir=$HOME id=which id shell=which sh trap cleanup INT function cleanup rm -f $workdir/sh $workdir/sh.c $workdir/parace $workdir/parace.c rm -rf $workdir/PATMP cat $workdir/parace.c include include include include include define...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition. Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LDBINDNOW to 1, and then calling execv on the...

PT-2009-4355 · Pulseaudio · Pulseaudio

Name of the Vulnerable Software and Affected Versions: PulseAudio versions 0.9.9 through 0.9.14 Description: A race condition exists that allows local users to gain privileges. This issue involves the creation of a hard link and is related to the application setting LD BIND NOW to 1, and then...

CVE-2009-0794

Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service applet crash via a crafted Pulse Audio source data line...

Integer overflow

Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service applet crash via a crafted Pulse Audio source data line...