Packet Storm Security Last 100 http://packetstormsecurity.org/ 100 Most Recent Packet Storm File Additions en-us phpbb2plus-sql.txt http://packetstormsecurity.org/1003-exploits/phpbb2plus-sql.txt phpBB2 Plus version 1.53 suffers from a remote SQL injection vulnerability. oraclexdb-overflow.txt http://packetstormsecurity.org/1003-exploits/oraclexdb-overflow.txt Oracle XDB FTP service UNLOCK buffer overflow exploit that spawns a reverse shell. phpnukerd-sql.txt http://packetstormsecurity.org/1003-exploits/phpnukerd-sql.txt PHP-Nuke Ratedownload suffers from a remote SQL injection vulnerability. ninkobb-addadmin.txt http://packetstormsecurity.org/1003-exploits/ninkobb-addadmin.txt NinkoBB version 1.3RC4 change / add administrator cross site request forgery exploit. joomlaalert-sql.txt http://packetstormsecurity.org/1003-exploits/joomlaalert-sql.txt Joomla Alert suffers from a remote SQL injection vulnerability. miranda-fail.txt http://packetstormsecurity.org/1003-advisories/miranda-fail.txt Miranda versions 0.8.16 and 0.9.0 alpha build #6 Unicode and SVN rev. 11383 suffer from a silent TLS failure. arp_sniff.c http://packetstormsecurity.org/1003-exploits/arp_sniff.c ARP Sniff (Sniffer Lite) is a tiny ARP sniffer. This tool will be useful to analyze the ARP packets in the network. The tool gives out two types of information, the 14 byte Ethernet header and 28 byte ARP header. The tool requires G++ compiler and a libpcap package. Three arguments are coded as of now. One is to list the available devices, second is to sniff the default device and third is to sniff the device given as argument. The sniffer outputs the Ethernet header (Source MAC address, Destination MAC address and Ethernet type), ARP Header (Hardware type, Protocol type, Hardware address length, Protocol address length, Opcode, Source Hardware address and Protocol address, Destination hardware address and Protocol address). varicad-overflow.c http://packetstormsecurity.org/1003-exploits/varicad-overflow.c VariCAD version 2010-2.05 EN local buffer overflow exploit. Comes with options to spawn calc.exe, bindshell, and add user shellcode. softsaurus-rfi.txt http://packetstormsecurity.org/1003-exploits/softsaurus-rfi.txt Softsaurus version 2.01 suffers from multiple remote file inclusion vulnerabilities. nensorcms-lfisql.txt http://packetstormsecurity.org/1003-exploits/nensorcms-lfisql.txt Nensor CMS version 2.01 suffers from remote SQL injection and local file inclusion vulnerabilities. sahana-bypass.txt http://packetstormsecurity.org/1003-exploits/sahana-bypass.txt Sahana version 0.6.2.2 suffers from an authentication bypass vulnerability. USN-914-1.txt http://packetstormsecurity.org/1003-advisories/USN-914-1.txt Ubuntu Security Notice 914-1 - Mathias Krause discovered that the Linux kernel did not correctly handle missing ELF interpreters. Marcelo Tosatti discovered that the Linux kernel's hardware virtualization did not correctly handle reading the /dev/port special device. Sebastian Krahmer discovered that the Linux kernel did not correctly handle netlink connector messages. Ramon de Carvalho Valle discovered that the Linux kernel did not correctly validate certain memory migration calls. Jermome Marchand and Mikael Pettersson discovered that the Linux kernel did not correctly handle certain futex operations. secunia-qfxsrf.txt http://packetstormsecurity.org/1003-advisories/secunia-qfxsrf.txt Secunia Research has discovered a vulnerability in Quicksilver Forums, which can be exploited by malicious people to conduct cross-site request forgery attacks. The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. execute arbitrary SQL queries by tricking a logged in administrator into visiting a malicious web site. joomlackforms-lfisql.txt http://packetstormsecurity.org/1003-exploits/joomlackforms-lfisql.txt The Joomla Ckforms component suffers from local file inclusion and remote SQL injection vulnerabilities. preisschlact-sql.txt http://packetstormsecurity.org/1003-exploits/preisschlact-sql.txt Preisschlacht Multi Liveshop System suffers from a remote SQL injection vulnerability. sipwitch-0.7.4.tar.gz http://packetstormsecurity.org/sip/sipwitch-0.7.4.tar.gz GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP rver, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate. secunia-qfbidisclose.txt http://packetstormsecurity.org/1003-advisories/secunia-qfbidisclose.txt Secunia Research has discovered a security issue in Quicksilver Forums, which can be exploited by malicious people to disclose potentially sensitive information. The database backup functionality stores the database backup with a semi-predictable file name inside the web root. This can be exploited to download the backup by guessing the file name. postnukece-sql.txt http://packetstormsecurity.org/1003-exploits/postnukece-sql.txt The Postnuke ContentExpress module suffers from a remote SQL injection vulnerability. secunia-qfmddisclose.txt http://packetstormsecurity.org/1003-advisories/secunia-qfmddisclose.txt Secunia Research has discovered a security issue in Quicksilver Forums, which can be exploited by malicious, local users to disclose sensitive information. The application passes the database password via the command line to the mysqldump utility, which may disclose the password via the process list. joomlainclude-sql.txt http://packetstormsecurity.org/1003-exploits/joomlainclude-sql.txt The Joomla Include component suffers from a remote SQL injection vulnerability. CORE-2010-0311.txt http://packetstormsecurity.org/1003-exploits/CORE-2010-0311.txt Core Security Technologies Advisory - eFront is vulnerable to local file inclusion vulnerability, which allows an external remote attacker to upload an arbitrary file and execute code on the vulnerable website learning platform. Version 3.5.5 is vulnerable. joomlavxdate-sqlxss.txt http://packetstormsecurity.org/1003-exploits/joomlavxdate-sqlxss.txt The Joomla VXDate component suffers from cross site scripting, path disclosure and remote SQL injection vulnerabilities. USN-913-1.txt http://packetstormsecurity.org/1003-advisories/USN-913-1.txt Ubuntu Security Notice 913-1 - It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. argosoft-traversal.txt http://packetstormsecurity.org/1003-exploits/argosoft-traversal.txt ArGoSoft FTP Server .NET version 1.0.2.1 suffers from a directory traversal vulnerability. dff-0.5.0-src.tar.gz http://packetstormsecurity.org/forensics/dff-0.5.0-src.tar.gz DFF (Digital Forensics Framework) is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules. CORE-2009-0803.txt http://packetstormsecurity.org/1003-advisories/CORE-2009-0803.txt Core Security Technologies Advisory - A vulnerability found in the memory management of the Virtual Machine Monitor makes memory pages mapped above the 2GB available with read or read/write access to user-space programs running in a Guest operating system. CORELAN-10-013.txt http://packetstormsecurity.org/1003-exploits/CORELAN-10-013.txt Windisc version 1.3 suffers from a stack buffer overflow vulnerability. Full exploit code included. fckeditor-shell.txt http://packetstormsecurity.org/1003-exploits/fckeditor-shell.txt FCKEditor version 2.0 RC3 suffers from a shell upload vulnerability. USN-912-1.txt http://packetstormsecurity.org/1003-advisories/USN-912-1.txt Ubuntu Security Notice 912-1 - It was discovered that Audio File Library contained a heap-based buffer overflow. If a user or automated system processed a crafted WAV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. The default compiler options for Ubuntu should reduce this vulnerability to a denial of service. ZDI-10-032.txt http://packetstormsecurity.org/1003-advisories/ZDI-10-032.txt Zero Day Initiative Advisory 10-032 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP MaxDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the serv.exe process which listens by default on TCP port 7210. The process trusts a value from a handshake packet and uses it as a length when copying data to the stack. If provided a malicious value and packet data, this can be leveraged to execute arbitrary code under the context of the SYSTEM user. clantigercms-xsrf.txt http://packetstormsecurity.org/1003-exploits/clantigercms-xsrf.txt Clan Tiger CMS suffers from a cross site request forgery vulnerability. chillycms-xss.txt http://packetstormsecurity.org/1003-exploits/chillycms-xss.txt Chilly CMS suffers from a persistent cross site scripting vulnerability. chillycms-xsrf.txt http://packetstormsecurity.org/1003-exploits/chillycms-xsrf.txt Chilly CMS suffers from a cross site request forgery vulnerability. wftpdkill.py.txt http://packetstormsecurity.org/1003-exploits/wftpdkill.py.txt WFTPD version 3.3 remote unhandled exception denial of service exploit. sugarcrm-xss.txt http://packetstormsecurity.org/1003-exploits/sugarcrm-xss.txt SugarCRM versions prior to 5.5.0a and 5.2.0l suffer from a cross site scripting vulnerability. ZDI-10-031.txt http://packetstormsecurity.org/1003-advisories/ZDI-10-031.txt Zero Day Initiative Advisory 10-031 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable software utilizing Apple's WebKit library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to a failure to unregister a callback pointer during the destruction of a particular type of element when embedded inside a 'blink' container. The application dereferences the original resource which can can be leveraged by an attacker to execute arbitrary code under the context of the current user. ossim22-exec.pdf http://packetstormsecurity.org/1003-exploits/ossim22-exec.pdf CYBSEC Security Advisory - OSSIM version 2.2 suffers from a remote command execution vulnerability. ossim22-upload.pdf http://packetstormsecurity.org/1003-exploits/ossim22-upload.pdf CYBSEC Security Advisory - OSSIM version 2.2 suffers from an arbitrary file upload vulnerability. ossim22-download.pdf http://packetstormsecurity.org/1003-exploits/ossim22-download.pdf CYBSEC Security Advisory - OSSIM version 2.2 suffers from an arbitrary file download vulnerability. egroupware-exec.pdf http://packetstormsecurity.org/1003-exploits/egroupware-exec.pdf CYBSEC Security Advisory - EGroupware suffers from a remote command execution vulnerability. Versions 1.4.001 / 1.4.002 / 1.6.001 / 1.6.002 and Premium Line versions 9.1 and 9.2 are affected. egroupware-xss.pdf http://packetstormsecurity.org/1003-exploits/egroupware-xss.pdf CYBSEC Security Advisory - EGroupware suffers from a reflected cross site scripting vulnerability. Versions 1.4.001 / 1.4.002 / 1.6.001 / 1.6.002 and Premium Line versions 9.1 and 9.2 are affected. occms-sql.txt http://packetstormsecurity.org/1003-exploits/occms-sql.txt Online Community CMS By I-net suffers from a remote SQL injection vulnerability. zigurratcms-sql.txt http://packetstormsecurity.org/1003-exploits/zigurratcms-sql.txt Zigurrat CMS suffers from a remote SQL injection vulnerability. parscms-sql.txt http://packetstormsecurity.org/1003-exploits/parscms-sql.txt Pars CMS suffers from a remote SQL injection vulnerability. dsa-2017-1.txt http://packetstormsecurity.org/1003-advisories/dsa-2017-1.txt Debian Linux Security Advisory 2017-1 - Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. cutenews-insecure.txt http://packetstormsecurity.org/1003-exploits/cutenews-insecure.txt CuteNews version 1.4.6 suffers from an insecure cookie handling vulnerability. familyconnections22-sql.txt http://packetstormsecurity.org/1003-exploits/familyconnections22-sql.txt Family Connections version 2.2 suffers from multiple remote SQL injection vulnerabilities. ZDI-10-030.txt http://packetstormsecurity.org/1003-advisories/ZDI-10-030.txt Zero Day Initiative Advisory 10-030 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari and other WebKit based browsers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of the run-in value for display CSS styles. A specially crafted web page can cause a use after free() condition in WebKit's WebCore::RenderBlock() method. This can be further leveraged by attackers to execute arbitrary code under the context of the current user. frecf-lfi.txt http://packetstormsecurity.org/1003-exploits/frecf-lfi.txt Free Real Estate Contact Form version 1.09 suffers from a local file inclusion vulnerability. shorturl-lfi.txt http://packetstormsecurity.org/1003-exploits/shorturl-lfi.txt Short URL version 1.01 suffers from a local file inclusion vulnerability. oscmax-shell.txt http://packetstormsecurity.org/1003-exploits/oscmax-shell.txt osCMax version 2.0 using blacklisting instead of whitelisting and due to this suffers from a shell upload vulnerability. adobe_libtiff.rb.txt http://packetstormsecurity.org/1003-exploits/adobe_libtiff.rb.txt This Metasploit module exploits an integer overflow vulnerability in Adobe Reader and Adobe Acrobat Professional versions 8.0 through 8.2 and 9.0 through 9.3. httpdx-break.txt http://packetstormsecurity.org/1003-exploits/httpdx-break.txt Httpdx version 1.5.3 remote break services exploit. dojo-xss.txt http://packetstormsecurity.org/1003-exploits/dojo-xss.txt Dojo Toolkit SDK versions 1.4.1 and below suffer from a cross site scripting vulnerability. plumbercon10-cfp.txt http://packetstormsecurity.org/papers/call_for/plumbercon10-cfp.txt PlumberCon 10 Call For Papers - This convention will be taking place in Austria from July 9th through the 11th, 2010. csice-xssxsrf.txt http://packetstormsecurity.org/1003-exploits/csice-xssxsrf.txt CSICE suffers from cross site request forgery and cross site scripting vulnerabilities. buck-security_0.4.zip http://packetstormsecurity.org/UNIX/scanners/buck-security_0.4.zip Buck-Security is a security scanner for Debian and Ubuntu Linux. It helps you to harden your system by running some important security checks. For example, it finds world-writable files and directories, setuid and setgid programs, superuser accounts, and installed attack tool packages. It also checks your umask and checks if the sticky bit is set for /tmp, among other checks. iexploder-1.5.tgz http://packetstormsecurity.org/web/iexploder-1.5.tgz iExploder is like a fire hydrant full of bad HTML and CSS code to test the stability and security of web browsers. Available as a standalone webserver or CGI script, it continuously feeds browsers bad data in the hope that they will eventually crash. It is designed to run for hours, or even days until the browser crashes. namebench was initially written as a QA tool for the Mozilla Project to test the Firefox 1.0 release, and is now included and used by Apple's Webkit project. skypeimbot-analysis.pdf http://packetstormsecurity.org/papers/general/skypeimbot-analysis.pdf Whitepaper called An Analysis of the Skype IMBot Logic and Functionality. joomlaas-sql.txt http://packetstormsecurity.org/1003-exploits/joomlaas-sql.txt The Joomla As component suffers from a remote SQL injection vulnerability. iphone_crash_2.py.txt http://packetstormsecurity.org/1003-exploits/iphone_crash_2.py.txt iPhone Springboard crash proof of concept exploit. whatweb-0.4.tar.gz http://packetstormsecurity.org/UNIX/scanners/whatweb-0.4.tar.gz WhatWeb next generation web scanner identifies what websites are running. Released at the Kiwicon conference (kiwicon.org) in Wellington, New Zealand. Written in Ruby for Linux. Flexible plugin architecture with over 70 plugins so far. Passive plugins use information in the headers, cookies, HTML body and URL. Aggressive plugins can identify versions of Joomla, phpBB, etc by making extra requests to the webserver. Screenshots on the homepage. swingette-dos.txt http://packetstormsecurity.org/1003-exploits/swingette-dos.txt Swingette version 1.1 buffer overflow denial of service exploit that creates a malicious .mp3 file. embedthis-dos.txt http://packetstormsecurity.org/1003-exploits/embedthis-dos.txt Embedthis Appweb version 3.1.2 remote denial of service exploit. httpdx153b-crash.txt http://packetstormsecurity.org/1003-exploits/httpdx153b-crash.txt httpdx version 1.5.3b remote pre-authentication denial of service proof of concept exploit. mediaplayer-dos.txt http://packetstormsecurity.org/1003-exploits/mediaplayer-dos.txt Media Player version 6.4.9.1 with K-Lite Codec Pack denial of service exploit that creates a malicious .avi file. gomplayeravi-dos.txt http://packetstormsecurity.org/1003-exploits/gomplayeravi-dos.txt GOM Player version 2.1.21 denial of service exploit that creates a malicious .avi file. quickzip_xpsp3.pl.txt http://packetstormsecurity.org/1003-exploits/quickzip_xpsp3.pl.txt QuickZip version 4.60.019 stack buffer overflow exploit for XP SP3. ocftpd-overflow.rb.txt http://packetstormsecurity.org/1003-exploits/ocftpd-overflow.rb.txt This Metasploit module exploits a stack overflow in the USER verb in Open & Compact FTPd version 1.2. The program will crash once the payload is sent, so bind shell payloads are not effective. ads-xss.txt http://packetstormsecurity.org/1003-exploits/ads-xss.txt phpAdsNew, OpenAds and OpenX suffer from a cross site scripting vulnerability in banner.swf. sqlmap-0.8.tar.gz http://packetstormsecurity.org/UNIX/audit/sqlmap-0.8.tar.gz sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more. joomlagcalendar-lfi.txt http://packetstormsecurity.org/1003-exploits/joomlagcalendar-lfi.txt The Joomla GCalendar component version 2.1.5 suffers from a local file inclusion vulnerability. phpclassifieds75-sql.txt http://packetstormsecurity.org/1003-exploits/phpclassifieds75-sql.txt PHP Classifieds version 7.5 suffers from a remote blind SQL injection vulnerability. joomlaninjarss-lfi.txt http://packetstormsecurity.org/1003-exploits/joomlaninjarss-lfi.txt The Joomla Ninja RSS Syndicator component version 1.0.8 suffers from a local file inclusion vulnerability. phenix-sql.txt http://packetstormsecurity.org/1003-exploits/phenix-sql.txt Phenix version 3.5b suffers from a remote SQL injection vulnerability. joomlabidding-sql.txt http://packetstormsecurity.org/1003-exploits/joomlabidding-sql.txt The Joomla Bidding component suffers from a remote SQL injection vulnerability. joomlarpx-lfi.txt http://packetstormsecurity.org/1003-exploits/joomlarpx-lfi.txt The Joomla Ulti RPX component version 2.1.0 suffers from a local file inclusion vulnerability. duhok-xss.txt http://packetstormsecurity.org/1003-exploits/duhok-xss.txt Duhok Forum version 1.0 suffers from a cross site scripting vulnerability. freehost-shell.txt http://packetstormsecurity.org/1003-exploits/freehost-shell.txt FreeHost version 1.00 suffers from a remote shell upload vulnerability. torrenthoster-shellxss.txt http://packetstormsecurity.org/1003-exploits/torrenthoster-shellxss.txt Torrent Hoster suffers from cross site scripting and shell upload vulnerabilities. chcms-shell.txt http://packetstormsecurity.org/1003-exploits/chcms-shell.txt CH-CMS.ch version 2 suffers from a remote shell upload vulnerability. interspiresc-upload.txt http://packetstormsecurity.org/1003-exploits/interspiresc-upload.txt Interspire Shopping Cart version 5.5.4 suffers from backup related and shell upload vulnerabilities. subdreamer-upload.txt http://packetstormsecurity.org/1003-exploits/subdreamer-upload.txt Subdreamer CMS version 3.0.1 suffers from an arbitrary file upload vulnerability. ZDI-10-029.txt http://packetstormsecurity.org/1003-advisories/ZDI-10-029.txt Zero Day Initiative Advisory 10-029 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the WebCore's HTMLObjectElement::renderFallBackContent() method. By rewriting an HTML element via the document's innerHTML() method a memory corruption occurs resulting from a call-after-free. This can be leveraged to execute arbitrary code under the context of the current user. andromeda-xsscookie.txt http://packetstormsecurity.org/1003-exploits/andromeda-xsscookie.txt Andromeda version 1.9.2 suffers from cross site scripting and cookie manipulation vulnerabilities. IranianNames.txt http://packetstormsecurity.org/Crackers/wordlists/language/IranianNames.txt This is a list of Iranian names to be used for cracking. addressbookscript-lfi.txt http://packetstormsecurity.org/1003-exploits/addressbookscript-lfi.txt Address Book Script version 1.9 suffers from a local file inclusion vulnerability. osdate-rfi.txt http://packetstormsecurity.org/1003-exploits/osdate-rfi.txt osDate suffers from a remote file inclusion vulnerability. preisschlacht-sql.txt http://packetstormsecurity.org/1003-exploits/preisschlacht-sql.txt Preisschlacht version 4 Flash System suffers from a remote SQL injection vulnerability. joomlaroute-sql.txt http://packetstormsecurity.org/1003-exploits/joomlaroute-sql.txt The Joomla Route component suffers from a remote SQL injection vulnerability. newbie-disclose.txt http://packetstormsecurity.org/1003-exploits/newbie-disclose.txt Newbie CMS suffers from a remote file disclosure vulnerability. joomlaorg-sql.txt http://packetstormsecurity.org/1003-exploits/joomlaorg-sql.txt The Joomla Org component suffers from a remote SQL injection vulnerability. desktoponnet-lfi.txt http://packetstormsecurity.org/1003-exploits/desktoponnet-lfi.txt DesktopOnNet version 3 Beta9 suffers from a local file inclusion vulnerability. joomlanfnaddressbook-sql.txt http://packetstormsecurity.org/1003-exploits/joomlanfnaddressbook-sql.txt The Joomla NFN Address Book component suffers from a remote SQL injection vulnerability. rogiobiz-bypass.txt http://packetstormsecurity.org/1003-exploits/rogiobiz-bypass.txt RogioBiz PHP File Manager version 1.2 administrative bypass exploit. phppool-sql.txt http://packetstormsecurity.org/1003-exploits/phppool-sql.txt PHPPool Media Domain Verkaufs und Auktions Portal suffers from a remote SQL injection vulnerability. devilzclanportal-rfi.txt http://packetstormsecurity.org/1003-exploits/devilzclanportal-rfi.txt deV!L'z Clanportal version 1.5.2 suffers from a remote file inclusion vulnerability. phpmylogon-sql.txt http://packetstormsecurity.org/1003-exploits/phpmylogon-sql.txt PhpMyLogon version 2 suffers from a remote SQL injection vulnerability. joomlacream-sql.txt http://packetstormsecurity.org/1003-exploits/joomlacream-sql.txt The Joomla Cream component suffers from a remote SQL injection vulnerability. troubleticket-exec.txt http://packetstormsecurity.org/1003-exploits/troubleticket-exec.txt Trouble Ticket Express versions 3.01, 3.0, 2.24, and 2.21 suffer from code execution and directory traversal vulnerabilities.