156 matches found
CVE-2017-16199
CVE-2017-16199 corresponds to a directory-traversal vulnerability in susu-sum (a static file server). The issue allows an attacker to access files outside the intended directory by crafting URL paths that include traversal sequences (for example ../../../../../../etc/passwd). Multiple connected s...
CVE-2017-16199
susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
SQL Injection Vulnerability in check_need_status, check_pay_sum Methods of WK+shop General Mall System
WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. WK+shop general mall system checkneedstatus, checkpaysum method SQL injection vulnerability, attackers can construct a specif...
Directory Traversal
Overview Affected versions of susu-sum resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...
MariaDB 10.0.0 < 10.0.27 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.27. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.27 advisory. - Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and...
MariaDB Server 10.0.x < 10.0.27 Multiple DoS
Binary data 9544.prm...
Sum Technologies SQL Injection
Exploit Author:Th3 R0cksT3r Exploit Title: Sum Technologies id SQL Injection Vulnerability Email: [email protected] Vendor Homepage: http://www.sumtechnologies.com/ Google Dork: intext:"Powered by Sum Technologies" Proof Of Concept: 1. https://server/elferecting.php?id=SQL Injection 2...
[security bulletin] HPSBMU03020 rev.1 - HP Version Control Agent (VCA) and Version Control Repository Manager (VCRM) running OpenSSL on Linux and Windows, Remote Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04262472 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04262472 Version: 1 HPSBMU03020 rev....
[ipset_list] ipset set listing wrapper script
Features: Calculate sum of set members and match on that count. List only members of a specified set. Choose a delimiter character for separating members. Show only sets containing a specific glob matching header. Arithmetic comparison on headers with an integer value. Match members using a...
[security bulletin] HPSBMA02558 SSRT010158 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02290344 Version: 1 HPSBMA02558 SSRT010158 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...
UnrealIRCd Backdoor
Detection of backdoor in UnrealIRCd. SPDX-FileCopyrightText: 2010 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:unrealircd:unrealircd"; ifdescriptio...
Google Pays $2K for Chrome Vulnerability
Google has paid out its highest sum yet, $2,000, for the discovery of a high-risk vulnerability found in its Chrome browser. The recipient is developer Sergey Glazunov, who found a DOM method-related means of circumventing the same origin policy. Read the full article. The H Security...
WordPress XSS vulnerability in RSS Feed Generator
===== noXSS.org Security Advisory ====== Advisory: WordPress XSS vulnerability in RSS Feed Generator Author: Jeremias Reith [email protected] Published: 2008/11/25 Affected: WordPress 2.6.5 Summary ======= WordPress prior to v2.6.3 fails to sanitize the Host header variable correctly when generating R...
w3c security update
CentOS Errata and Security Advisory CESA-2007:0208 Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflo...
CVE-2006-5164
CVE-2006-5164 affects Sum Effect Software digiSHOP 4.0. Vulnerable component: cart.php. Type: cross-site scripting (XSS). Vectors: remote attackers can craft requests using the (1) sortBy or (2) search parameters to inject arbitrary web script/HTML. Impact: potential script execution in the victi...
CVE-2004-2371
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service hang via packets that contain text strings...