Easy File Sharing Web Server vfolder参数目录遍历漏洞

BUGTRAQ ID: 33973 Easy File Sharing Web Server允许访客经由浏览器上传/下载文件，拥有FTP和WEB版本。 Easy File Sharing Web Server的thumbnail.ghp模块没有正确地过滤对vfolder参数的输入便用于打开文件，远程攻击者可以通过提交特殊格式的文件请求执行目录遍历攻击，打开任意本地文件。 EFS Software Easy File Sharing Web Server 4.8 厂商补丁： EFS Software ------------...

Easy File Sharing Web Server 4.8 File Disclosure Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad...

Easy File Sharing Web Server 4.8 File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad www.v4-team.com -- Bug -- Exploit ...

Easy File Sharing Web Server 4.8 - File Disclosure

Easy File Sharing Web Server 4.8 - File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by...

Easy File Sharing Web Server 4.8 - File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad www.v4-team.com -- Bug -- Exploit ...

Easy File Sharing Web Server 4.8 File Disclosure Vulnerability

Exploit for unknown platform in category remote exploits ============================================================== Easy File Sharing Web Server 4.8 File Disclosure Vulnerability ============================================================== Program: Easy File Sharing Web Server Version: 4.8...

Fedora Update for avahi FEDORA-2007-019

Check for the Version of avahi OpenVAS Vulnerability Test Fedora Update for avahi FEDORA-2007-019 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

U.S. needs to investigate cyberweapons

Despite what you may have seen on 24 or read in Tom Clancy’s novels, the United States is well behind much of the rest of the world in developing both defensive and offensive cybersecurity capabilities, and that’s a deficit that may end up costing us dearly in the long run, according to a longtim...

GigaTribe Detection

According to its banner, the remote web server is from GigaTribe, a private peer-to-peer file sharing application. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35468; scriptversion"1.9"; scriptsetattributeattribute:"synopsis", value: "The remote web server appears t...

SMB TRANS Request Buffer Overflow Remote Code Execution (MS09-001; CVE-2008-4834)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol handles specially crafted SMB packets. The vulnerability is due to insufficient...

Samba注册表共享名非授权访问漏洞

BUGTRAQ ID: 33118 CVECAN ID: CVE-2009-0022 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 启用了注册表共享的Samba没有正确地验证共享名，通过认证的攻击者可以通过使用较老版本的smbclient并指定空字符串为共享名（如smbclient //server/ -U user%pass）来访问root文件系统。 Samba 3.2.0 - 3.2.6 临时解决方法： 通过registry shares = no禁用注册表共享。 厂商补丁： Samba -----...

CVE-2008-4222

natd in networkcmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service infinite loop via a crafted TCP packet...

CVE-2008-4222

natd in networkcmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service infinite loop via a crafted TCP packet...

Apple Mac OS X multiple security vulnerabilities

Apple Type Services DoS, BOM buffer overflow with CPIO archives, CoreGraphics buffer overflow on images parsing, invalid cookies setting for geographical domains, dangerous content warning bypass, multiple Flash Player Plugin vulnerabilities, multiple privilege escalations, Internet Sharing DoS,...

[SECURITY] Fedora 8 Update: samba-3.0.33-0.fc8

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora 10 Update: samba-3.2.5-0.23.fc10

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora 9 Update: samba-3.2.5-0.22.fc9

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

Samba smbd远程信息泄露漏洞

BUGTRAQ ID: 32494 CVECAN ID: CVE-2008-4314 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba在处理trans、trans2和nttrans请求时存在边界条件错误。这些请求用于在客户端和服务器之间传输任意数量的内存，包含有两个偏移：偏移A指向客户端所发送的PDU，偏移B将传输的内存引导到服务端上的缓冲区。由于在偏移A中的一个剪切错误，导致远程攻击者可以通过发送特制的请求泄露受限制的smbd进程内存。 Samba 3.0.29 - 3.2.4 Samba -----...

Telecommunications is prohibited ADSL Router Internet crack method-vulnerability warning-the black bar safety net

Several methods are provided, everyone can try. ADSL share Internet access, there are two ways, one is proxy, one is the Address Translation（NAT），we often say that the routing is actually NAT mode, in fact the Routing and NAT principles there are still differences, there will not be discussed, no...

iDefense Security Advisory 11.03.08: Multiple Vendor CUPS SGI imagetops Heap Overflow Vulnerability

iDefense Security Advisory 10.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2008 I. BACKGROUND The Common UNIX Printing System, more commonly referred to as CUPS, provides a standard printer interface for various Unix based operating systems. "imagetops" is a part of CUPS...