Samba file server DoS

Memory exhaustion in smbd by issuing large number of share connection requests...

CVE-2006-3281

CVE-2006-3281 : A remote code execution flaw in Windows Explorer/Internet Explorer 6 related to handling of Drag & Drop with CLSID extensions (Folder GUID Code Execution). Root cause: improper handling of directories/CLSID extensions can lead to arbitrary code execution when a user visits a craft...

Directory traversal

Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hubdir parameter, as demonstrated by including accesslog. NOTE: in some cases, arbitrary remot...

Path traversal

Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames...

CVE-2006-0873

CVE-2006-0873 affects Coppermine Photo Gallery (docs/showdoc.php, f parameter). It is an absolute path traversal / local file inclusion vulnerability allowing arbitrary file inclusion, potentially from Windows UNC shares. Affected: Coppermine Photo Gallery 1.4.3 and earlier. Root cause: unsanitiz...

CVE-2006-0786

The CVE-2006-0786 entry concerns PHP-Kit prior to 1.6.1 Release 2, where include.php contains an incomplete blacklist vulnerability. When allow_url_fopen is enabled, an attacker can perform PHP remote file include attacks by passing a path parameter that points to a (1) UNC share or (2) ftps URL,...

In the WEBSHELL, the clever use of file sharing to perform system commands-bug warning-the black bar safety net

Recently in the invasion of Win2003 when found default case not use the system comes with the cmd. exe files to execute system commands, upload the cmd. exe file because the file is too big to fail, then I pass a station adjacent to the machine's file share successfully upload the cmd. exe file,...

PaQFile_Share.txt

eFileGo 3.01 Multiple Vulnerabilities Severity: Critical Date of release: 31/12/2005 Product url: http://www.paqtool.com/download.html Description: A file share http server. Safely as p2p software, no client needed. You friend can download file from your computer by internet browser quickly. This...

The black ice of the campus to pick up broilers Edition-vulnerability warning-the black bar safety net

The famous black ice firewall, I believe you warrior Diamondback they have heard of it! It is by virtue of its superior anti-black abilities and become dear Internet users friends travel home, surf the Internet essential good product. （As if in to it for advertising。。。。 Oh that we today refer to...

Debian DSA-762-1 : affix - several vulnerabilities

Kevin Finisterre discovered two problems in the Bluetooth FTP client from affix, user space utilities for the Affix Bluetooth protocol stack. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-2250 A buffer overflow allows remote attackers to...

CVE-2005-2250

Buffer overflow in Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share...

CVE-2005-1577

APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share...

CVE-2005-1577

The CVE-2005-1577 entry concerns APG Technology ClassMaster, where an improper restriction of access to sensitive folders enables remote attackers to reach those folders over a network share. The NVD notes a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low complexity, and partial ...

CVE-2005-1097

Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges...

APG Classmaster Workstation Windows SMB share access vulnerability

Greetings, This vulnerability affects I believe all APG Classmaster Workstation versions. It remains a problem as an attacker can access shares with full permissions over a LAN. An attackers needs to issue a simple command in an MSDOS prompt using the net windows application, mapping an account t...

p2pShareSpy.txt

--------------------- Application: --------------------- P2P Share Spy 2.2 and probably prior versions --------------------- Introduction: --------------------- Vendor: Rebrand Software http://www.rebrandsoftware.com/ Vendor Description: P2P Share Spy can search the Internet/world for computers...

CVE-2005-1097

CVE-2005-1097 concerns Rebrand P2P Share Spy 2.2, where the password is stored in plaintext in the registry (txtPassword), enabling local users to gain privileges. The connected records consistently describe the root cause as plaintext password storage in the registry and local privilege escalati...

P2P Share Spy 2.2 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits =================================================== P2P Share Spy 2.2 Local Password Disclosure Exploit =================================================== / P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor:...

P2P Share Spy 2.2 - Local Password Disclosure

P2P Share Spy 2.2 - Local Password Disclosure / P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor: Rebrand Software - www.rebrandsoftware.com Vulnerable Description: P2P Share Spy 2.2 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA W...

P2P Share Spy 2.2 - Local Password Disclosure

/ P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor: Rebrand Software - www.rebrandsoftware.com Vulnerable Description: P2P Share Spy 2.2 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2:...