CVE-2006-0786

The CVE-2006-0786 entry concerns PHP-Kit prior to 1.6.1 Release 2, where include.php contains an incomplete blacklist vulnerability. When allow_url_fopen is enabled, an attacker can perform PHP remote file include attacks by passing a path parameter that points to a (1) UNC share or (2) ftps URL,...

CVE-2006-0786: Undefined Security Weakness

Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allowurlfopen enabled, allows remote attackers to conduct PHP remote file include attacks via a path parameter that specifies a 1 UNC share or 2 ftps URL, which bypasses the check for "http://", "ftp://"...

In the WEBSHELL, the clever use of file sharing to perform system commands-bug warning-the black bar safety net

Recently in the invasion of Win2003 when found default case not use the system comes with the cmd. exe files to execute system commands, upload the cmd. exe file because the file is too big to fail, then I pass a station adjacent to the machine's file share successfully upload the cmd. exe file,...

PaQFile_Share.txt

eFileGo 3.01 Multiple Vulnerabilities Severity: Critical Date of release: 31/12/2005 Product url: http://www.paqtool.com/download.html Description: A file share http server. Safely as p2p software, no client needed. You friend can download file from your computer by internet browser quickly. This...

The black ice of the campus to pick up broilers Edition-vulnerability warning-the black bar safety net

The famous black ice firewall, I believe you warrior Diamondback they have heard of it! It is by virtue of its superior anti-black abilities and become dear Internet users friends travel home, surf the Internet essential good product. （As if in to it for advertising。。。。 Oh that we today refer to...

CVE-2002-2170: Undefined Security Weakness

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request...

Debian DSA-762-1 : affix - several vulnerabilities

Kevin Finisterre discovered two problems in the Bluetooth FTP client from affix, user space utilities for the Affix Bluetooth protocol stack. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-2250 A buffer overflow allows remote attackers to...

CVE-2005-2250

Buffer overflow in Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share...

CVE-2005-2250: Undefined Security Weakness

Buffer overflow in Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share...

CVE-2005-1577

The CVE-2005-1577 entry concerns APG Technology ClassMaster, where an improper restriction of access to sensitive folders enables remote attackers to reach those folders over a network share. The NVD notes a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low complexity, and partial ...

CVE-2005-1577

APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share...

CVE-2005-1577: Undefined Security Weakness

APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share...

CVE-2005-1097

Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges...

APG Classmaster Workstation Windows SMB share access vulnerability

Greetings, This vulnerability affects I believe all APG Classmaster Workstation versions. It remains a problem as an attacker can access shares with full permissions over a LAN. An attackers needs to issue a simple command in an MSDOS prompt using the net windows application, mapping an account t...

p2pShareSpy.txt

--------------------- Application: --------------------- P2P Share Spy 2.2 and probably prior versions --------------------- Introduction: --------------------- Vendor: Rebrand Software http://www.rebrandsoftware.com/ Vendor Description: P2P Share Spy can search the Internet/world for computers...

CVE-2005-1097

CVE-2005-1097 concerns Rebrand P2P Share Spy 2.2, where the password is stored in plaintext in the registry (txtPassword), enabling local users to gain privileges. The connected records consistently describe the root cause as plaintext password storage in the registry and local privilege escalati...

CVE-2005-1097: Undefined Security Weakness

Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges...

P2P Share Spy 2.2 - Local Password Disclosure

P2P Share Spy 2.2 - Local Password Disclosure / P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor: Rebrand Software - www.rebrandsoftware.com Vulnerable Description: P2P Share Spy 2.2 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA W...

P2P Share Spy 2.2 - Local Password Disclosure

/ P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor: Rebrand Software - www.rebrandsoftware.com Vulnerable Description: P2P Share Spy 2.2 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2:...

P2P Share Spy 2.2 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits =================================================== P2P Share Spy 2.2 Local Password Disclosure Exploit =================================================== / P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor:...