Monster Menus - Access Bypass - Moderately Critical - SA-CONTRIB-2015-163

Monster Menus is a hierarchical menu tree, which provides highly scalable, granular permissions for all pages within a site. The module includes an option to remove nodes from view add them to a "recycle bin" rather than deleting them outright. When a node has been put into a bin using an affecte...

McAfee 4.0,Network Associates for Windows NT 4.0.2/4.0.3 a,Norton AntiVirus 2000 Recycle Bin Exclusion

No description provided by source. McAfee VirusScan 4.0,Network Associates VirusScan for Windows NT 4.0.2/4.0.3 a,Symantec Norton AntiVirus 2000 Recycle Bin Exclusion Vulnerability source: http://www.securityfocus.com/bid/956/info Many commercial virus scanners for Windows platforms exclude the...

Microsoft Windows NT 4.0 Recycle Bin Pre-created Folder Vulnerability

No description provided by source. Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Recycle Bin Pre-created Folder Vulnerability source: http://www.securityfocus.com/bid/963/info When an NT user uses the Recycle Bin for the first time on a given partition, a folder is created in the \Recycler...

Liferay Portal 6.2.0 CE GA1 Multiple XSS

According to its self-reported version number, the version of Liferay Portal running on the remote host is 6.2.0. It is, therefore, potentially affected by the following cross-site scripting vulnerabilities : - Input passed from page titles is not sanitized before it is displayed in the Recycle...

CVE-2013-1164

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

Code injection

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

CVE-2013-1164

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1164 due to improper implementation of the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, enabling remote attackers to trigger a DoS (card reload) via fragmented IPv6 multicast packets. Affected versions include 3.4 before ...

iScripts eSwap 2.0 - SQL Injection Cross-Site Scripting

iScripts eSwap 2.0 - SQL Injection Cross-Site Scripting Title:iScripts eSwap v2.0 sqli and xss vulnerability Author: Sid3^effects Published: 2010-06-05 price:$99.95 email:[email protected] vendor: iScripts url : http://www.iscripts.com/eswap/ google dork : Powered by iScripts eSwap. ooooo .ooooo...

iScripts eSwap v2.0 XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== iScripts eSwap v2.0 XSS / SQL Injection Vulnerability ===================================================== Title:iScripts eSwap v2.0 sqli and xss vulnerability Author: Sid3^effects...

Microsoft Expression Media Plaintext Password Storage Weakness

CVE-2007-5470 Microsoft Expression Media is prone to a weakness because passwords are stored in plain-text format. This issue stems from a design error in the catalog password-protection feature. Attackers could use this issue in conjunction with other vulnerabilities in a host to gain access to...

Design/Logic Flaw

Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...

Dynamic Network access version of the storm log library ultimate law-vulnerability and early warning-the black bar safety net

| Dynamic Network access version of the storm log Library The Ultimate Law of the --- | Note:need to obtain a front Desk administrator permissions after use Articles specified in the recycle. asp?...

Scotty no trace CleanCache help you erase private history-vulnerability warning-the black bar safety net

In viruses and hackers to wreak havoc today, personal information security is particularly important, so that your information is not leaked out, the usual practice is to clear XP history, we can right-click on“Start”--properties--customize--clear, on the IE Properties window in Microsoft also...

Watchguard SOHO 2.2 - Denial of Service

Watchguard SOHO 2.2 - Denial of Service source: https://www.securityfocus.com/bid/2082/info The SOHO 2.2 is a popular SOHO firewall by Watchguard Technologies Inc. A vulnerability exists in Watchguard SOHO 2.2 firewalls with firmware versions 2.2.1 and below that could allow a remote attacker to...

CVE-2000-0121

The CVE-2000-0121 entry concerns the Recycle Bin utility in Windows NT and Windows 2000. The root cause is that a local attacker can create a subdirectory named with the victim’s SID inside the recycler directory, enabling read or modification of files by the attacker. This constitutes a local pr...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

CVE-2000-0119

The CVE-2000-0119 entry describes a vulnerability in McAfee VirusScan and Norton Anti-Virus where default configurations do not scan files in the Windows Recycle Bin’s RECYCLED folder. This allows an attacker to store malicious code undetected within that folder. The root cause is the failing to ...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

bypass.viruscheck.txt

Greetings All, I originally released this vulnerability over the Christmas holidays on NTBugTraq. I spoke with a member of the Security Focus staff about getting it onto the web site and was told that I should post the problem here. During our conversation we decided that I hadn't been clear in m...

Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder

Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Recycle Bin Pre-created Folder Vulnerability source: https://www.securityfocus.com/bid/963/info When an NT user uses the Recycle Bin for the first time on a given partition, a folder is...