Friendly Technologies Read/Write Registry/Read Files Exploit

No description provided by source. !-- Proof of Concept... Read write to registry and also read files More codes at irc.nix.co.il/binaryvision ! -- html titleFriendly Technologies - Read/Write Registry/title object classid="clsid:F4A06697-C0E7-4BB6-8C3B-E01016A4408B" id='FT'/object script...

JDK untrusted applet/application privilege escalation (6661918)

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as...

FreeBSD : qemu -- unchecked block read/write vulnerability (9cfbca7f-efb7-11dc-be01-0211060005df)

Ian Jackson reports on the debian-security mailinglist : When a block device read or write request is made by the guest, nothing checks that the request is within the range supported by the backend, but the code in the backend typically assumes that the request is sensible. Depending on the...

[SECURITY] Fedora 8 Update: scponly-4.6-10.fc8

scponly is an alternative 'shell' for system administrators who would like to provide access to remote users to both read and write local files without providing any remote execution priviledges. Functionally, it is best described as a wrapper to the "tried and true" ssh suite of applications...

CVE-2002-2353

tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests...

CVE-2007-5633

The SpeedFan.sys driver in Alfredo Milani Comparetti SpeedFan 4.33 is vulnerable to local privilege escalation when used on Microsoft Windows Vista x64 . The root cause is the ability of local users to read or write arbitrary Model Specific Registers (MSRs) via the IOCTL_RDMSR (0x9C402438) and IO...

CVE-2007-5210

Arbor Networks Peakflow SP is affected. Infections concern remote authenticated users bypassing access restrictions to read or write unspecified data via unknown vectors, affecting releases earlier than 3.5.1 patch 14 and 3.6.x prior to 3.6.1 patch 5. Root cause details are not fully disclosed in...

[SECURITY] Fedora 7 Update: ntfs-3g-1.913-2.fc7

The ntfs-3g driver is an open source, GPL licensed, third generation Linux NTFS driver. It provides full read-write access to NTFS, excluding access to encrypted files, writing compressed files, changing file ownership, access right. Technically it=E2=80=99s based on and a major improvement to th...

CVE-2007-4263: Undefined Security Weakness

Unspecified vulnerability in the server side of the Secure Copy SCP implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors...

Mandrake Linux Security Advisory : lha (MDKSA-2007:117)

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Information disclosure

The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges. NOTE: some of these details are obtained from third party information...

CVE-2007-2760

The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges. NOTE: some of these details are obtained from third party information...

CVE-2007-2760

The CVE concerns Adempiere prior to version 3.1.6. The canUpdate function in model/MRole.java fails to properly validate user roles, enabling remote authenticated read-only users to obtain read-write privileges. This behavioral flaw is the root cause described across sources, resulting in a high-...

CVE-2007-2760

The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges. NOTE: some of these details are obtained from third party information...

CVE-2007-2760: Undefined Security Weakness

The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges. NOTE: some of these details are obtained from third party information...

TFTP Server TFTPDWin 0.4.2 - Directory Traversal

source: https://www.securityfocus.com/bid/23937/info TFTP Server TFTPDWIN is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to gain read/write access to privileged directories and files. TFT...

CVE-2007-0657

Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir command...

CVE-2006-5382

3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned...

CVE-2006-5382

The CVE-2006-5382 entry affects 3Com Switch SS3 4400 switches, specifically firmware 5.11, 6.00, 6.10 and earlier. Affects remote confidentiality/integrity/availability by allowing remote attackers to read the SNMP Read-Write Community string and perform unauthorized actions via normally restrict...

CVE-2006-4950: Undefined Security Weakness

Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain...