GLSA-200705-14 : XScreenSaver: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200705-14 XScreenSaver: Privilege escalation XScreenSaver incorrectly handles the results of the getpwuid function in drivers/lock.c when using directory servers during a network outage. Impact : A local user can crash XScreenSave...

SOL1882 - Buffer Overflows in DNS Resolver Libraries vulnerability CAN-2002-19

CERT has released an advisory regarding a buffer overflow in the way that stub resolvers handle DNS responses. Malicious users could use this exploit to cause a denial-of-service DoS attack or possibly run arbitrary code on the system. For more information about this advisory, refer to the...

SunShop Shopping Cart 3.5/4.0 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/23662/info Sunshop is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

PHP RRD Browser 0.2 - P Directory Traversal

PHP RRD Browser 0.2 - P Directory Traversal source: https://www.securityfocus.com/bid/22520/info php rrd browser is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of...

Comodo Firewall Pro privilege escalation

Insufficient filtering of hooked SSDT functions potentially allows code execution in system content...

The system security of the empty password to enter the WINDOWS2000-vulnerability warning-the black bar safety net

WINDOWS200 where winnt\System32\Config under the SAM file that account password database file, it save the WINDOWS2000 of all the username and password when you log in, the system will put the username and password you enter with the SAM file in the encrypted data proofreading, and if they...

Sun Solaris 10 - ICMP Remote Denial of Service

// source: https://www.securityfocus.com/bid/22323/info Sun Solaris is prone to a remote denial-of-service vulnerability. A successful attack can trigger a crash in the operating system, leading to a denial-of-service condition for legitimate users. Solaris 10 is affected by this issue. / SunOS...

Network Security Series knowledge of CGI exploits collection under-vulnerability warning-the black bar safety net

4 2. exprcalc. cfm ● Type: the attack type ● The level of risk: low ● Description: if in a Web directory containing: | /cfdocs/expeval/exprcalc. cfm /cfdocs/expeval/sendmail. cfm /cfdocs/expeval/eval. cfm /cfdocs/expeval/openfile. cfm /cfdocs/expeval/displayopenedfile. cfm...

Vulnerability classification and to further explore-exploit warning-the black bar safety net

Vulnerability is a forever fairy tale. To achieve esque hero dream, to achieve to break the technological monopoly of the freedom blueprint, discover the vulnerability of the people, exploit the people, patching holes in people, like the vulnerability of people, afraid of the vulnerability of...

Magic Photo Storage Website - includedb_config.php?_config[site_path] Remote File Inclusion

Magic Photo Storage Website - includedbconfig.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting...

Tomato garden version of xp and Tokai xp little-known security vulnerabilities-vulnerability warning-the black bar safety net

Boost this post for the elite. Hope everyone spirit of mutual communication of intent, mutual mobile mutual intake, put an end to words are added, to enhance personal accomplishment. ed by R...this post will be divided into three parts, the first part, the tomato garden version of the vulnerabili...

Microsoft Windows Agent ACF File Handling Memory Corruption (MS06-068; CVE-2006-3445)

A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier and more natural. The vulnerability is due to a memory corruption error in the...

The Search Engine Project 0.942 - 'Configfunction.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

Microsoft Windows Server Service SMB Rename Code Execution (MS06-063; CVE-2006-4696)

SMB Server Message Block is a file, print, and other network services suite used by Windows operating systems. By sending a specially crafted SMB Rename request, an attacker may cause a remote Windows server to reboot or halt. In combination with successful code injection, this could also lead to...

MamboLaiThai ExtCalThai 0.9.1 - 'mail.inc.php?CONFIG_EXT[LIB_DIR]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20487/info ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attac...

Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp0.php?dir_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and the underlying system; other attack...

Hack job: network intrusion detection initial detection method-vulnerability warning-the black bar safety net

Carefully configure the Win2000 server can Defense 9 0% or more of intrusion and penetration, however, like the previous Chapter, the end of the mentioned:system security is a continuous process, as new vulnerabilities appear and the server application changes, the system of the security situatio...

BigACE 1.8.2 - 'admin.cmd.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP code and execute it in the context of the webserver...

BigACE 1.8.2 - 'item_main.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP code and execute it in the context of the webserver...