CVE-2005-4074

The CVE-2005-4074 entry describes a directory traversal vulnerability in CF_Nuke 4.6 and earlier. When Sandbox Security is disabled, remote attackers can cause local .cfm files to be included via a ".." in the (1) sector or (2) page parameters. The connected documents provide this exact vulnerabi...

CF_Nuke 4.6 - index.cfm Local File Inclusion

CFNuke 4.6 - index.cfm Local File Inclusion source: https://www.securityfocus.com/bid/15777/info CFNuke is prone to a local file include vulnerability. This is due to a lack of sanitization of user-supplied input. This may facilitate the unauthorized viewing of files and unauthorized execution of...

CF_Nuke 4.6 - 'index.cfm' Local File Inclusion

source: https://www.securityfocus.com/bid/15777/info CFNuke is prone to a local file include vulnerability. This is due to a lack of sanitization of user-supplied input. This may facilitate the unauthorized viewing of files and unauthorized execution of local ColdFusion code. It should be noted...

CVE-2004-2331

Summary of CVE-2004-2331 (ColdFusion MX 6.1 / 6.1 J2EE): Local users could bypass sandbox security and access sensitive information by using Java reflection to reach trusted Java objects without invoking CreateObject or the cfobject tag. The issue affects ColdFusion MX 6.1 and ColdFusion MX 6.1 J...

Java Web Start argument injection vulnerability

OVERVIEW ======== Java Web Start is a technology for easy client-side deployment of Java applications. "Using Java Web Start technology, standalone Java software applications can be deployed with a single click over the network" from Sun Microsystems's website. Java Web Start is installed with Ja...

Повышение прав пользователя и обход защиты в user mode linux (privelege escalation)

МОжно модифицировать память kernel, получив права root внутри sandbox, после чего можно выйти из sandbox вызвав ошибку в основной исполняющей программе...

CVE-2000-1099

Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...

CVE-2000-1099

Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...