5849 matches found
Updated python-simplejson package fixes security vulnerability
Python 2 and 3 are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the json module caused by insufficient bounds checking. The bug is caused by allowing the user to supply a negative value that is used as an array index, causing the scanstring function to...
MGASA-2014-0285 Updated python & python3 packages fix two vulnerabilities
Updated python and python3 packages fix security vulnerabilities: Python 2 and 3 are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the json module caused by insufficient bounds checking. The bug is caused by allowing the user to supply a negative value tha...
Updated python & python3 packages fix two vulnerabilities
Updated python and python3 packages fix security vulnerabilities: Python 2 and 3 are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the json module caused by insufficient bounds checking. The bug is caused by allowing the user to supply a negative value tha...
Design/Logic Flaw
iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by reading this file...
siemens tecnomatix factorylink 8.0.1.1473 - Multiple Vulnerabilities
No description provided by source. Sources: http://aluigi.org/adv/factorylink1-adv.txt http://aluigi.org/adv/factorylink2-adv.txt http://aluigi.org/adv/factorylink3-adv.txt http://aluigi.org/adv/factorylink4-adv.txt http://aluigi.org/adv/factorylink5-adv.txt...
PAD Site Scripts 3.6 - Remote Arbitrary Database Backup Vulnerability
--------------------------------------------------------------- --------------------------------------------------------------- PAD Site Scripts v3.6 Bypass DB Backup Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...
Oracle 8.1.7 JSP/JSPSQL Remote File Reading Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2288/info A problem with Oracle on the Windows 2000 platform could allow users access to restricted information. This problem in the handling of input by the Oracle software may result in remote users being permitted read...
Oracle <= 9i / 10g (read/write/execute) Exploitation Suite
No description provided by source. -- -- $Id: raptororaexec.sql,v 1.2 2006/11/23 23:40:16 raptor Exp $ -- -- raptororaexec.sql - java exploitation suite for oracle -- Copyright c 2006 Marco Ivaldi [email protected] -- -- This is an exploitation suite for Oracle written in Java. Use it to --...
Easy Icon Maker .ico File Reading Crash
No description provided by source. ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX 000000...
APBoard 2.0 2 Unauthorized Thread Reading Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6330/info A vulnerability has been reported for APBoard that may allow unauthorized users to read postings in internal forums. The vulnerability is a result of the 'useraction.php' script failing to properly check user...
Nokia IPSO 3.4.x Voyager ReadFile.TCL Remote File Reading Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7426/info It has been reported that Nokia IPSO does not properly handle some types of requests through Voyager. Because of this, an attacker with access to the interface may be able to view potentially sensitive...
mnoGoSearch 3.3.12 (search.cgi) - Arbitrary File Read
No description provided by source. ----------------------------------------------------------- PT-2013-17 Positive Technologies Security Advisory Arbitrary Files Reading in mnoGoSearch ----------------------------------------------------------- --- Vulnerable software mnoGoSearch Version: 3.3.12...
StatusNet/Laconica 0.7.4, 0.8.2, 0.9.0beta3 - Arbitrary File Reading
No description provided by source. +-------------------------------------------------------------------------------+ + StatusNet/Laconica = 0.7.4, = 0.8.2, = 0.9.0beta3 - arbitrary file reading + +-------------------------------------------------------------------------------+ Date: - 10/10/2013...
Linux sysctl() Kernel 2.2.x Memory Reading Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2364/info The Linux Kernel is the core of the Linux Operating System. It was originally written by Linus Torvalds, and is publicly maintained. A problem in the Linux kernel may allow root compromise. The sysctl call allow...
simple file manager 0.24a Multiple Vulnerabilities
No description provided by source. /\ | flame vrs Simple File Manager =0.24= | | http://onedotoh.sourceforge.net/ | | Various Vulnerbilities Including: | / /+++++++++++++++++++++++++++++++++++++++++++\ | Using the scripts supplied by the webapp: | | Reading of Arbitrary files | | Deletion of...
Fizzle 0.5 RSS Feed HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23144/info Fizzle is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
MinaliC Webserver 1.0 - Directory Traversal Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010...
Netscape PublishingXPert 2.0/2.2/2.5 - Local File Reading Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.htm does not sufficiently...
ContentServ 4.x - (admin/FileServer.php) File Disclosure Vulnerability
No description provided by source. ContentServ again still features remote reading of arbitrary files ==================================================================== ContentServ is a cms and cross media publishing software. Let me quote from their website: At ContentServ, there is always...
