Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure

Affected products ================= Dokeos 1.8.6.1 / 2.0 Chamilo 1.8.7.1 Resume ====== Two file disclosure flaws exists on these LMS platforms, which could allow an attacker registered on the system to obtain files from the server, i.e your database configuration file, or any other file readeable...

Built2Go PHP Shopping - SQL Injection

Built2Go PHP Shopping - SQL Injection Script Name: Built2Go PHP Shopping version = 1.7 Site: http://built2go.com/ Script Demo: http://demos.built2go.com/shopping/1/ Found: Br0ly Google Dork: "Powered by Built2Go PHP Shopping" p0c:...

CVE-2010-3616

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service communications-interrupted state and DHCP client service loss by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios...

Ecava IntegraXor 3.6.4000.0 Directory Traversal

Exploit for windows platform in category remote exploits Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi Auriemma e-mail: email protected...

OpenTTD Multiple use-after-free Denial of Service vulnerability

This host is installed with OpenTTD and is prone to multiple denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbopenttdmultuseafterfreedosvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ OpenTTD Multiple use-after-free Denial of Service Vulnerabilities Authors: Veerendra GG Copyright:...

SiteEngine 6.0 SQL注入漏洞

网站引擎SiteEngine,全称：博卡网站引擎管理系统，软件基于PHP程序和Mysql数据库开发，采用B/S体系结构。 利用这个漏洞需要评论功能开启默认开启 SiteEngine 6.0 厂商补丁： SiteEngine ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.siteengine.net/...

kernel: nfsd4: bug in read_buf

Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service panic or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the readbuf and...

Fedora 12 : subversion-1.6.13-1.fc12.1 (2010-16115)

This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...

PYSEC-2010-22

pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...

Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Overview Oracle iPlanet Web Server formerly Sun Java System Web Server contains a cross-site request forgery vulnerability. Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Yoshihiro...

N-point virtual host system fatal vulnerability-vulnerability warning-the black bar safety net

The author of the article:worries people This vulnerability I found already a long time since the time is relatively busy there has been no release of.. As relates to the server more I will not publish how to get a background PSW.。。。。 First, the analysis under the sitehost. asp his fatal...

OTRS -- Multiple XSS and denial of service vulnerabilities

OTRS Security Advisory reports: Multiple Cross Site Scripting issues: Missing HTML quoting allows authenticated agents or customers to inject HTML tags. This vulnerability allows an attacker to inject script code into the OTRS web-interface which will be loaded and executed in the browsers of...

Один тип уязвимостей Питон программ

Один тип уязвимостей Питон программ. Авторы: prusle и djp. Неустойчивость к ошибкам библиотечных функций языка Си таких как stscpy, sprintf, strcat и многих других позволяет получать полный контроль над ОС, написанными на Си. Изобретательность хакеров проявилась в изобретении методов эксплуатации...

Microsoft Office Excel PivotTable Cache Data Record Handling Overflow

Added: 08/19/2010 CVE: CVE-2010-2562 BID: 42199 OSVDB: 66991 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel is vulnerable to a stack buffer overflow due to a logic error when parsing...

CMSQLite <= 1.2 & CMySQLite <= 1.3.1 Remote Code Execution Exploit

Exploit for php platform in category web applications ================================================================== CMSQLite Thanks to rgod for the php code and Natural Killer "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.="...

Internet Navigware Server Information Disclosure Vulnerability

Overview Internet Navigware Server is vulnerable to information disclosure or data tampering. Impact A remote attacker could disclose or alter information. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)

Exploit for macOS platform in category remote exploits ======================================================= EvoCam Web Server OSX ROP Remote Exploit Snow Leopard ======================================================= !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import...

Weborf服务器HTTP头远程拒绝服务漏洞

BUGTRAQ ID: 41064 Weborf是用C编写的轻型Web服务器。 Weborf服务器没有正确地处理HTTP请求头Connection:字段中的unicode字符，远程攻击者可以通过发送恶意HTTP请求导致服务器终止。 Galileo Students Team Weborf 0.12.1 厂商补丁： Galileo Students Team --------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://freshmeat.net/projects/weborf/releases/318531...

CVE-2010-2425

CVE-2010-2425 affects South River Technologies Titan FTP Server 8.10.1125 and earlier, with a directory traversal flaw in COMB command due to improper handling of ..// sequences that allows remote authenticated users to read or delete arbitrary files. OpenVAS entries classify Titan FTP Server

Home FTP Server 1.10.2.143 - Directory Traversal

source: https://www.securityfocus.com/bid/40419/info Home FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to download, upload, and delete arbitrary files outside of the FTP server...