2422 matches found
kernel: s390 task_show_regs infoleak
The taskshowregs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/...
Design/Logic Flaw
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...
Create System Characteristics
Create a System Characteristics element as defined by the OVAL specification and store it in the Knowledge Base. Note: The created System Characteristics are shown in a separate VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...
CVE-2011-1062: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sContext, 2 sort, 3 dir, and 4 show parameters in a save action to index.php; the 5 dir and 6 show parameters to printlist.php;...
Windows 8 to run on smartphone chips !
In his keynote speech at the Consumer Electronics Show CES in Las Vegas, Microsoft CEO Steve Ballmer revealed that Windows 8, the next version of Microsoft's desktop operating system, will be able to run on much smaller mobile devices like phones. He revealed that Windows 8 will support...
With Autos At CES, Are Vehicle Hacks Far Behind?
Sometimes news events just come together in a way that opens a window – even if its a kind of cloudy window – onto the future. So it was this week, as stories about a coming generation of wired automobiles collided with some thought-provoking reports on the vulnerability of said cars to tradition...
Microsoft to Support ARM Chips in Upcoming Windows Version
Microsoft Corp., feeling pressure from popular products like Apple Inc.'s iPad, is developing a new operating system that marks a departure from the company's traditional reliance on Intel Corp.'s chip technology. This information comes from sources familiar with Microsoft's plans. Next month,...
CMS Show - Job SQL Injection
=========================================== CMS Show - Job SQL Injection Vulnerability =========================================== +Title : CMS Show - Job SQL Injection Vulnerability +Software : CMS Show - Job +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeatyahoodotcom +Home...
Nmap NSE: NFS Show Mount
This script attempts to show NFS exports. This is a wrapper on the Nmap Security Scanner's http://nmap.org nfs-showmount.nse OpenVAS Vulnerability Test $Id: gbnmapnfsshowmount.nasl 7148 2017-09-15 13:01:14Z cfischer $ Wrapper for Nmap NFS Show Mount NSE script. Authors: NSE-Script: Patrik Karlsso...
Nmap NSE: NFS Show Mount
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple XSS Vulnerabilities
Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1005 09/07/2010 Issue Discovered 09/10/2010 Vendor Notified 09/13/2010 Vendor Confirmed 09/14/2010 Fix Available Class: Cross-Si...
Nero Show Time 2.CE v 2.0.0.44 DLL Hijacking Exploit
Exploit for windows platform in category local exploits ==================================================== Nero Show Time 2.CE v 2.0.0.44 DLL Hijacking Exploit ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...
PT-2010-4293 · Zabbix · Zabbix
Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 1.8.3rc1 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the formatQuery function. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...
Tradecms English foreign trade enterprises web site v1. 0. Vulnerability analysis-vulnerability warning-the black bar safety net
Release time: 2010-07-15 Affected version: Tradecms English foreign trade enterprises web site v1. 0 Vulnerability description: injection vulnerabilities, cross-permissions vulnerability; Database address: ClkjDaTa/ClkjCms. mdb Database open password: The default account and password: user: admin...
Zinkwazi PHPSlideShow Multiple Vulnerability
Exploit for php platform in category web applications ============================================ Zinkwazi PHPSlideShow Multiple Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
2DayBiz Job Site Script - SQL Injection
$------------------------------------------------------------------------------------------------------------------- $ 2daybiz Job site Script SQL injection $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :http://www.2daybiz.com/realestateportalscript.html $ Date :06/24/2010 $ $ $Exploit...
CVE-2009-4886
Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via a .. dot dot in the 1 file parameter to module/admin/files/showfile.php and the 2 path parameter to module/admin/files/showsource.php...
CVE-2009-4859
Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...
CVE-2009-4859: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...