A directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter to lib/dp_image.php.
RobotStats v1.0 is vulnerable to a SQL injection vulnerability due to lack of input validation in the 'robots.php' script. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable script with the 'rub' and 'robot' parameters. This will allow the attacker to execute arbitrary SQL queries in the back-end database, potentially resulting in the manipulation or disclosure of sensitive data.
RobotStats v1.0 is vulnerable to HTML Injection due to lack of security for admin folder and lack of any filter for HTML code at robots.lib.php. An attacker can inject their HTML code or XSS code by sending a malicious request to the target website.
This vulnerability allows an attacker to upload a malicious shell to a vulnerable Wordpress wpDataTables 1.5.3 and below website. The vulnerability exists due to the wpdatatables.php file which is always available without wpdatatables edit permission and the lib/upload/UploadHandler.php script which allows any type of file to be uploaded.
Wordpress wpDataTables 1.5.3 and below suffers from SQL injection vulnerability. The 'table_id' variable is not sanitized and is located in multiple php files.
JourneyMap (http://journeymap.techbrew.net/) is a mapping mod for Minecraft. It comes included with some modpacks, and is enabled by default in the popular Feed the Beast client. JourneyMap opens a web server on the client which is configured to listen on port 8080. When the client is running, a remote, unauthenticated user can have JourneyMap save a screenshot of the game to the hard drive by accessing a specific URL, consuming hard drive space. Accessing the URL and triggering a screenshot will display a message on the client's screen, which may somewhat lessen the severity of this exploit. Further, it takes a long time to fill up disk using this technique. JourneyMap allows depth and resolution to be specified in the URL as well, though a few simple tests showed no change despite altering these parameters. If one were able to increase the depth and resolution of the image, the drive would fill up faster.
The vulnerability exists in the function win32k!xxxMenuWindowProc. It calls the function win32k!xxxMNOpenHierarchy that can return valid pointer to data and 0 or -1 otherwise. The function win32k!xxxMenuWindowProc does not validate the result of win32k!xxxMNOpenHierarchy properly and it is possible to try to read data from address -1.
The code injection vulnerability has been found and confirmed within the software as an anonymous user. A successful attack could allow an anonymous attacker gains full control of the application and the ability to use any operating system functions that are available to the scripting environment.
MyBB had released 1.8.3 and 1.6.16 to fixed this vulnerability. MyBB's unset_globals() function can be bypassed under special conditions and it is possible to allows remote code execution. When unset_globals() function can be bypassed, it is possible to allows remote code execution. For example, if the attacker send the following request: foo.php?_POST[a]=1&_POST[b]=<?php system($_GET['cmd']); ?> The attacker can execute arbitrary code on the server.
Privatefirewall suffers from an unquoted search path issue impacting the Core Service 'PFNet' service for Windows deployed as part of Privatefirewall bundle. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. A successful attempt would require the local user to be able to insert their code in the system root path undetected by the OS or other security applications where it could potentially be executed during application startup or reboot. If successful, the local users code would execute with the elevated privileges of the application.
Services By CQR