CVE-2011-4293

The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets CSS and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified...

Umbraco CMS Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Umbraco CMS Remote Command Execution'...

DEBIAN-CVE-2011-4028

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists...

PT-2012-4820

Name of the Vulnerable Software and Affected Versions MM Forms Community plugin versions 2.2.5 through 2.2.6 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the includes/doajaxfileupload.php file, and then accessing it vi...

WordPress MM Forms Community 2.2.5 / 2.2.6 Shell Upload

Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins : http://downloads.wordpress.org/plugin/mm-forms-community.zip Date : 24-05-2012 Google Dork :...

CVE-2011-4014

The TAC Case Attachment tool in Cisco Wireless Control System WCS 7.0 allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors, aka Bug ID CSCtq86807...

PT-2012-1782

Name of the Vulnerable Software and Affected Versions Cisco Wireless Control System WCS version 7.0 Description The issue allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors. Recommendations For Cisco Wireless Control System WCS version 7.0, at the...

CVE-2011-4014: Exposure of Sensitive Information to an Unauthorized Actor

The TAC Case Attachment tool in Cisco Wireless Control System WCS 7.0 allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors, aka Bug ID CSCtq86807...

PT-2012-3662

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows local users to obtain sensitive information by reading temporary files created during printing, due to the use of world-readable permissions for these files. Recommendations For Opera...

UBUNTU-CVE-2012-0808

as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack...

Windows Manage Download and/or Execute

This module will download a file by importing urlmon via railgun. The user may also choose to execute the file with arguments via execstring. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

PT-2012-1805

Name of the Vulnerable Software and Affected Versions PAR::Packer module versions prior to 1.012 Description The issue concerns the creation of temporary files in a directory with a predictable name by the par mktmpdir function, without verifying the ownership and permissions of this directory...

CVE-2011-4828: Improper Control of Generation of Code

Unrestricted file upload vulnerability in includes/inlineimageupload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/...

PT-2011-5128

Name of the Vulnerable Software and Affected Versions AutoSec Tools V-CMS version 1.0 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the includes/inline image upload.php script, and then accessing it via a direct request...

Fedora 16 : puppet-2.6.6-3.fc16 (2011-13623)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

Apache Struts ParametersInterceptor Remote Code Execution

This module exploits a remote command execution vulnerability in Apache Struts versions use exploit/multi/http/struts/codeexecparameters msf undefinedcodeexecparameters show actions ...actions... msf undefinedcodeexecparameters set ACTION msf undefinedcodeexecparameters show options ...show and s...

CVE-2009-5082

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...

PT-2011-1254

Name of the Vulnerable Software and Affected Versions File::Temp module for Perl affected versions not specified Description The issue is related to the is safe function in the File::Temp module for Perl, which does not properly handle symlinks. This can potentially allow a remote attacker to...

Design/Logic Flaw

The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the 1 Admin/, 2 Admin/Defaults/, 3 Admin/GettingStarted/, 4 Admin/Popups/, 5 AppThemes/, 6 Client/, 7 Client/Popups/, 8 Services/, 9 Temp/, 10 UserControls/, 11...

Code injection

The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/frmSite.aspx, 2 Admin/frmSites.aspx, 3 Admin/frmViewReports.aspx, 4...