karol _ vulnerabilities and exploits

(subscribe to this query)

psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.

Astart Technologies Lprng 3.8.10.1 Astart Technologies Lprng 3.8.19 Astart Technologies Lprng 3.8.9 Astart Technologies Lprng 3.7.4

Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter.

Basilix Basilix Webmail 1.02 Beta Basilix Basilix Webmail 1.03 Beta

1 EDB exploit

pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name.

Andrew Morgan Linux Pam

1 EDB exploit

PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote malicious users to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) ...

Gonicus Gonicus System Administration 1.0

1 EDB exploit

Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable.

Jean-jacques Sarton Mtink 0.9.32 Jean-jacques Sarton Mtink 0.9.33 Jean-jacques Sarton Mtink 0.9.52

1 EDB exploit

Prometheus 6.0 and previous versions allows remote malicious users to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.php, (2) install.php, or (3) various test_*.php scripts.

Jason Orcutt Prometheus 3.0 Beta Jason Orcutt Prometheus 4.0 Beta Jason Orcutt Prometheus 6.0

1 EDB exploit

Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan prior to 1.02.00 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a long argument to the Update method.

Panda Panda Activescan 2.0

1 EDB exploit

The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan prior to 1.02.00 allows remote malicious users to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.

Panda Panda Activescan 2.0

1 EDB exploit

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.

Andreas Mueller Cdrdao 1.1.4 Andreas Mueller Cdrdao 1.1.5

4 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook