Mercurial 'patch.py'目录遍历漏洞

BUGTRAQ ID: 30072 CVE ID：CVE-2008-2942 CNCVE ID：CNCVE-20082942 Mercurial是一款分布式的版本控制工具。 Mercurial存在输入验证错误，远程攻击者可以利用漏洞进行目录遍历攻击，可能建立或者覆盖系统文件。 目前没有详细漏洞细节提供。 rPath rPath Linux 2 Mercurial Mercurial 1.0.17 可参考如下补丁： http://www.selenic.com/hg/rev/87c704ac92d4...

CMS Mini 0.2.2 Multiple Local File Inclusion Vulnerabilities

No description provided by source. AUTHOR : CWH Underground DATE : 22 June 2008 SITE : www.citec.us APPLICATION : CMS Mini VERSION : 0.2.2 VENDOR : http://www.cmsmini.it/ DOWNLOAD : http://downloads.sourceforge.net/cmsmini --- Local File Inclusion --- ---------------------------- Vulnerable File...

ThaiQuickCart (sLanguage) Local File Inclusion Vulnerability

No description provided by source. ===================================================================== ThaiQuickCart COOKIE:sLanguage Local File Inclusion Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

CA Internet Security Suite ActiveX unauthorized files access

SaveToFile method allows system files corruption...

OneCMS 2.5 (install_mod.php) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public...

Gaming Directory 1.0 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Gaming Directory 1.0 catid Remote SQL Injection Vulnerability ================================================================...

Debian Security Advisory DSA 223-1 (geneweb)

The remote host is missing an update to geneweb announced via advisory DSA 223-1. OpenVAS Vulnerability Test $Id: deb2231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 223-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

joovili-disclose.txt

found by EcHoLL version: 2. include/images.inc.php?picture=../../../../../../../../etc/passwd&thumbnail=FALSE include/images.inc.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE version 3...

HP laptops Software Update tool vulnerability

Advisory: ///////// There is another remotely exploitable flaw within software preinstalled in HP notebook machines. This time, the culprit is automatic software update tool provided by the vendor.The Potential exploitation may lead to user files loss or altering vital system files e.g. kernel,...

hp-activex.txt

Advisory: ///////// There is another remotely exploitable flaw within software preinstalled in HP notebook machines. This time, the culprit is automatic software update tool provided by the vendor.The Potential exploitation may lead to user files loss or altering vital system files e.g. kernel,...

HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category dos / poc ================================================================= HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities ================================================================= Advisory: ///////// There is another remotely...

GetBlog local File inclusion ..

Hello,, GetBlog local File inclusion .. http://sourceforge.net/projects/geblog Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Exploit : - tpl/Default/index.php?tplname=../../../../../../../etc/passwd00 WwW.SoQoR.NeT...

Altiris Deployment Solution Directory Traversal

SUMMARY Symantecs Altiris Deployment Solution is vulnerable to an elevation of privilege attack. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No AFFECTED PRODUCTS Affected Products Product | Version | Build | Solution...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= FireConfig 0.5 dl.php file Remote File Disclosure Vulnerability ================================================================= FireConfig v0.5 dl.php file Remote File...

Design/Logic Flaw

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...

CVE-2007-4798

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...

CVE-2007-4798

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...

Mailmarshal mail gateway directory traversal

Vulnerable outdated ported version of 'tar' utility is used, making it's possible to overwrite system files via directory traversal vulnerability...

Subversion (SVN) < 1.4.5 Directory Traversal Privilege Escalation (deprecated)

Binary data 4198.prm...

irc/bitchx -- multiple vulnerabilities

bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable. Nico Golde reports: There is a security issue in ircii-pana in bitchx' hostname command. The ehostname function...