EUVD-2006-3680

Malware in sbrugna...

File Upload Vulnerability in DzzOffice v1.3.1 Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A file upload vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the $GET'tpath' parameter. ...

PT-2017-8640

Name of the Vulnerable Software and Affected Versions setroubleshoot affected versions not specified Description The issue allows local users to bypass an intended container protection mechanism and execute arbitrary commands. This can be achieved by triggering an SELinux denial with a crafted fi...

CVE-2006-3685: Undefined Security Weakness

PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the tpath parameter to cnconfig.php. NOTE: the news.php vector is already covered by CVE-2005-0859...

CzarNews 1.14 - tpath Remote File Inclusion

CzarNews 1.14 - tpath Remote File Inclusion ================================================================= CzarNews = tpath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | |...

CzarNews 1.14 - 'tpath' Remote File Inclusion

================================================================= CzarNews = tpath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | ================================================================= Dork : "CzarNews v1....

CVE-2005-0859: Undefined Security Weakness

PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to 1 headlines.php or 2 news.php. NOTE: some sources have reported the "dir" parameter as being affected; however, this is likely a cut-and-paste error from the...