Secunia Research: Orbit Downloader metalink "name" Directory Traversal

====================================================================== Secunia Research 19/05/2010 - Orbit Downloader metalink "name" Directory Traversal - ====================================================================== Table of Contents Affected...

Joomla Camp26 VisitorData Module Shell Command Injection Vulnerability

No description provided by source. A vulnerability has been discovered in the Camp26 VisitorData module for Joomla, which can be exploited by malicious people to compromise a vulnerable system. Input passed via the "X-Forwarded-For" HTTP header is not properly sanitised before being used as a...

[CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite

CAL-20100204-3Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1280 CAL ID: CAL-20100204-3 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has discovered a...

REZERVI Belegungsplan und Gästedatenbank 'include/mail.inc.php' Remote File Include Vulnerability

UTILO REZERVI Belegungsplan und Gästedatenbank is prone to a remote file-include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the...

Openurgence Vaccin 1.03 Multiple File Inclusion Vulnerabilities

Openurgence Vaccin is prone multiple file inclusion vulnerabilities. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sudo sudoedit Local Command Privilege Escalation Vulnerability

Sudo contains a vulnerability that could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability exists due to an error in the affected software while matching commands due to incorrect path resolution. A local attacker with privileges to...

Security update available for Adobe Reader and Acrobat

Security update available for Adobe Reader and Acrobat Release date: April 13, 2010 Vulnerability identifier: APSB10-09 CVE numbers: CVE-2010-0190, CVE-2010-0191, CVE-2010-0192, CVE-2010-0193, CVE-2010-0194, CVE-2010-0195, CVE-2010-0196, CVE-2010-0197, CVE-2010-0198, CVE-2010-0199, CVE-2010-0201,...

ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability

ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-072 April 14, 2010 -- Affected Vendors: Cisco -- Affected Products: Cisco Secure Desktop -- TippingPointTM IPS Customer Protection: TippingPoint...

Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the Secure Desktop Web...

Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious website. The specific flaw exists within the deserialization o...

Facil-CMS 0.1RC2 - Local/Remote File Inclusion

Facil-CMS LFI/RFI Vulnerability +Title : Facil-CMS Multiple Vulnerability +Version: 0.1RC2 +Download: http://sourceforge.net/projects/facil-cms/files/ +Author: eidelweiss +Contact: eidelweissatcyberservicesdotcom !Thanks To: all friends -= Vuln C0de =- -facil-cms/index.php...

Mozilla Products Multiple Vulnerabilities Mar-10 (Windows)

The host is installed with Mozilla Firefox/Seamonkey/Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsmultvulnmar10win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilities Mar-10 Windows Authors: Antu Sanadi...

Crimson Editor - Overwrite (SEH)

Crimson Editor - Overwrite SEH A vulnerability exists in the way Crimson Editor reads file types from within configuration files and can be exploited, by malicious people, to compromise a vulnerable system. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code...

Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow

====================================================================== Secunia Research 09/02/2010 - Microsoft PowerPoint File Path Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability

This host has TheGreenBow IPSec VPN Client installed and is prone to Stack Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodthegreenbowipsecvpnclientbofvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability Authors: Antu Sanadi...

Secunia Research: Google Chrome Pop-Up Block Menu Handling Vulnerability

====================================================================== Secunia Research 26/01/2010 - Google Chrome Pop-Up Block Menu Handling Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Internet Explorer item Object Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of cloned DOM object...

Secunia Research: Microsoft Windows Flash Player Movie Unloading Vulnerability

====================================================================== Secunia Research 12/01/2010 - Microsoft Windows Flash Player Movie Unloading Vulnerability - ====================================================================== Table of Contents Affected...

VMware Releases Multiple Updates for ESX

VMware has released Security Advisory VMSA-2010-0001 to address multiple vulnerabilities in ESX Service Console packages for Network Security Services NSS and NetScape Portable Runtime NSPR. Exploitation of these vulnerabilities may allow an attacker to obtain sensitive information, cause a...

FreeWebshop.org: multiple vulnerabilities

------------------------------------------------------------------------ FreeWebshop.org: multiple vulnerabilities ------------------------------------------------------------------------ Yorick Koster, March 2009 ------------------------------------------------------------------------ Abstract...