Unfixed XSS vulnerability at www.secure-x-001.net

Security researcher Xylitol, has submitted on 05/06/2010 a cross-site-scripting XSS vulnerability affecting www.secure-x-001.net, which at the time of submission ranked 7797150 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2010. It is...

CGI Generic Path Traversal (extended test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local file inclusion vulnerabilities. By leveraging this issue, an attacker may be able to read arbitrary files on the web server or execute commands. %NASLMINLEVEL...

CGI Generic Path Traversal (write test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local file inclusion vulnerabilities. By leveraging this issue, an attacker may be able to modify arbitrary files on the web server or execute commands. Due to the w...

DSA-2016-1 drupal6 - several vulnerabilities

Bulletin has no description...

Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities (972270)

This host is missing a critical security update according to Microsoft Bulletin MS10-001. OpenVAS Vulnerability Test $Id: secpodms10-001.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerabilities 972270 Authors: Antu Sanadi Updated By:...

Panda Security Local Privilege Escalation

Security Advisory NSOADV-2010-001 Title: Panda Security Local Privilege Escalation Severity: Medium Advisory ID: NSOADV-2010-001 Found Date: 02.2008 Date Reported: 30.11.2009 Release Date: 09.01.2010 Author: Nikolas Sotiriu lofi Mail: nso-research at sotiriu.de URL:...

Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows...

Cross site scripting

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:001)

A vulnerability was found by the Google Security Team with how OpenSSL checked the verification of certificates. An attacker in control of a malicious server or able to effect a man-in-the-middle attack, could present a malformed SSL/TLS signature from a certificate chain to a vulnerable client,...

MDVA-2008:001 : urpmi

urpmi --auto-update was strangely broken in some uncertain cases see bug 36134. urpmi --limit-rate had a regression introduced in version 4.9.12. The updated package fixes these issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Mandriva Update for wireshark MDVSA-2008:001-1 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2008:001-1 wireshark Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

ModSecurity < 2.5.9 Remote Denial of Service Vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored...

Fedora Core 9 FEDORA-2009-0973 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-0973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-0984 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-0984. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 11.1)

The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)

The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Fedora Core 10 FEDORA-2009-0653 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-0653. OpenVAS Vulnerability Test $Id: fcore20090653.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0653 drupal Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 9 FEDORA-2009-0678 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-0678. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 11.1)

The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 11.0)

The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...