8759 matches found
Default credentials
usr/lib/cgi-bin/createpasswdfile.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the administrator password by reading this file...
Arbitrary file deletion
XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file...
CVE-2014-3851
usr/lib/cgi-bin/createpasswdfile.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the administrator password by reading this file...
CVE-2014-3800
XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file...
Cobham Sailor satellite terminals contain hardcoded credentials
Overview Cobham Sailor 900 and 6000 series satellite terminals contain hardcoded credentials. Description CWE-798: Use of Hard-coded Credentials IOActive reports that Cobham Sailor 900 and 6000 series satellite communication terminals running firmware version: 1.08 MFHF / 2.11 VHF contain hardcod...
World of Warcraft Armory Table 0.2.5 - WoWArmoryTable.php page Parameter Reflected XSS
The World of Warcraft – Armory Table WordPress plugin was affected by a WoWArmoryTable.php page Parameter Reflected XSS security vulnerability...
WordPress World of Warcraft Armory Table Plugin <= 0.2.5 - Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "page". Solution Update the plugin...
WordPress World of Warcraft Armory Table Plugin <= 0.2.5 - Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "page". Solution Update the plugin...
CVE-2014-3020
install.sh in the Embedded WebSphere Application Server eWAS 7.0 before FP33 in IBM Tivoli Integrated Portal TIP 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program...
Directory traversal
install.sh in the Embedded WebSphere Application Server eWAS 7.0 before FP33 in IBM Tivoli Integrated Portal TIP 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program...
CVE-2014-3020
CVE-2014-3020 affects IBM embedded WebSphere Application Server (eWAS) 7.0 bundled with IBM Tivoli/Directory Server. An optional install script (install.sh) may grant write access to the installRoot directory, enabling local privilege escalation via a Trojan horse. IBM security bulletins describe...
DEBIAN-CVE-2014-5031
The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors...
CVE-2014-5031
The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors...
UBUNTU-CVE-2014-5031
The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors...
World Of Warcraft 3.3.5a (macros-cache.txt) - Stack Overflow
No description provided by source. Exploit Title: World Of Warcraft 3.3.5a Stack Overflow macros-cache.txt Date: 21 Jul 2014 Exploit Author: Alireza Chegini @nimaarek Vendor Homepage: http://us.battle.net/wow/ Version: 3.3.5a Tested on: Win7 Output: --WoWError CrashDUmp : World of WarCraft build...
World Of Warcraft 3.3.5a - macros-cache.txt Stack Overflow
World Of Warcraft 3.3.5a - macros-cache.txt Stack Overflow Exploit Title: World Of Warcraft 3.3.5a Stack Overflow macros-cache.txt Date: 21 Jul 2014 Exploit Author: Alireza Chegini @nimaarek Vendor Homepage: http://us.battle.net/wow/ Version: 3.3.5a Tested on: Win7 Output: --WoWError CrashDUmp :...
World Of Warcraft 3.3.5a (macros-cache.txt) - Stack Overflow
Exploit for windows platform in category dos / poc Exploit Title: World Of Warcraft 3.3.5a Stack Overflow macros-cache.txt Date: 21 Jul 2014 Exploit Author: Alireza Chegini @nimaarek Vendor Homepage: http://us.battle.net/wow/ Version: 3.3.5a Tested on: Win7 Output: --WoWError CrashDUmp : World of...
World Of Warcraft 3.3.5a - 'macros-cache.txt' Stack Overflow
Exploit Title: World Of Warcraft 3.3.5a Stack Overflow macros-cache.txt Date: 21 Jul 2014 Exploit Author: Alireza Chegini @nimaarek Vendor Homepage: http://us.battle.net/wow/ Version: 3.3.5a Tested on: Win7 Output: --WoWError CrashDUmp : World of WarCraft build 12340 Exe: D:\Wow\Wow.exe Time: Jul...
JBossSX/PicketBox: World readable audit.log file
It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in t...