640 matches found
[Vulz] Seeblick 1.0 Beta File Upload Vulz
Software: SeeBlick 1.0 Beta Found by : Xcross87 Xploit : http://victim.com/path/seeblick-admin/upload.php http://victim.com/path/seeblick/admin/upload.php Demo : cm.bs-24.net/seeblick-admin/upload.php Upload all kind of files , in server will be rename into .html === Xcross87 | HCETeam Xploiter |...
Untrusted Application or Applet May Move or Copy Arbitrary Files
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...
gallery2 -- multiple vulnerabilities
Gallery project reports: Gallery 2.2.3 addresses the following security vulnerabilities: Unauthorized renaming of items possible with WebDAV reported by Merrick Manalastas Unauthorized modification and retrieval of item properties possible with WebDAV Unauthorized locking and replacing of items...
mysql -- renaming of arbitrary tables by authenticated users
MySQL reports: The requirement of the DROP privilege for RENAME TABLE was not enforced...
CVE-2007-1741
Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...
CVE-2007-0452
smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service memory and CPU exhaustion by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop...
CVE-2007-0452
smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service memory and CPU exhaustion by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop...
CVE-2007-0452
smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service memory and CPU exhaustion by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop...
CVE-2006-0127
Rockliffe MailSite IMAP (pre-6.1.22.1) suffers a directory-traversal in the RENAME command that enables remote authenticated users to rename other users’ folders. Affects the IMAP service; impact includes partial integrity (I: Partial, A: None, C: None) with no confidentiality/availability impact...
CVE-2006-0127: Undefined Security Weakness
Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. dot dot in the RENAME command...
CVE-2003-1205
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service crash by renaming a file to the "con" MS-DOS device name...
CVE-2003-1205
CVE-2003-1205 affects Crob FTP Server 2.60.1. Affected component: the FTP server’s file-rename handling. Root cause: remote authenticated users can trigger a denial of service (crash) by renaming a file to the MS-DOS device name “con.” Impact: DoS via crash; no other impacts described in the prov...
CVE-2005-0923
The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...
Symantec Norton AntiVirus vulnerable to DoS via the Auto-Protect "SmartScan" feature
Overview Symantec Norton AntiVirus may hang or crash when the Auto-Protect module SmartScan feature scans a renamed file on a network share. Description Symantec Norton AntiVirus is an anti-virus product for desktop and enterprise use. The Norton AntiVirus "Auto-Protect" module provides automatic...
CVE-2003-1205
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service crash by renaming a file to the "con" MS-DOS device name...
HM Software S to Infinity 3.0 - Multiple Vulnerabilities
HM Software S to Infinity 3.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1368/info A number of vulnerabilities exist in HM Software S to Infinity, a security access control, desktop lockdown and transparent encryption application. Intended features include restriction of...
Incorrect Permissions for CD-Rom Administrative Shares
Hi All. I've received tons of responses on this topic and found out why there are so many conflicting results of this problem. Our policy is to rename CD-Rom drives from the default assigned by Windows 2000 to H:, because there's less confusion when adding extra drives. The problem is this. If yo...
Дырка в Carello shopping cart
Можно создавать файл на сервере или переименовывать существующие файлы. Таким образом можно, нпример, получить исходные тексты .asp - файла...
win98explorer.txt
Date: Mon, 9 Feb 1998 17:49:45 -0800 From: Scott To: [email protected] Subject: Another Windows98 Bug... I'm not sure about the details of this problem, but when testing another buffer overflow, I created a long filename called "testfile.txt " note the chr160's at the end It is 235 characters ...
