RHEL 5 / 6 : flash-plugin (RHSA-2013:0149)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:0149 advisory. - flash-plugin: buffer overflow flaw that can lead to arbitrary code execution APSB13-01 CVE-2013-0630 Note that Nessus has not tested for this...

Java Applet JMX Remote Code Execution

This module abuses the JMX classes from a Java Applet to run arbitrary Java code outside of the sandbox as exploited in the wild in January of 2013. The vulnerability affects Java version 7u10 and earlier. Module Options msf use exploit/multi/browser/java/jre17jmxbean msf undefinedjre17jmxbean sh...

CVE-2012-6430

creationtimestamp| type| source ---|---|--- 2013-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38207...

Flash Player for Mac <= 10.3.183.48 / 11.5.502.136 Buffer Overflow (APSB13-01)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal to or earlier than 11.5.502.136, or 10.x equal to or earlier than 10.3.183.48. It is, therefore, potentially affected by an unspecified buffer overflow vulnerability. C Tenable Network...

Wordpress wp-photo-album plugin Full Path Disclosure vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress Valums Uploader - File Upload Vulnerability

Document Title: =============== Wordpress Valums Uploader - File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=817 Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 817...

RedHat Update for libtiff RHSA-2012:1590-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for kernel RHSA-2012:1580-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for mysql RHSA-2012:1551-01

Check for the Version of mysql OpenVAS Vulnerability Test RedHat Update for mysql RHSA-2012:1551-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Tectia SSH USERAUTH Change Request Password Reset

This Metasploit module exploits a vulnerability in Tectia SSH server for Unix-based platforms. The bug is caused by a SSH2MSGUSERAUTHPASSWDCHANGEREQ request before password authentication, allowing any remote user to bypass the login routine, and then gain access as root. This file is part of the...

(SSH.com Communications) SSH Tectia - USERAUTH Change Request Password Reset (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'net/ssh' class Metasploit3...

Unfixed XSS vulnerability at www.goingout.ro

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.goingout.ro, which at the time of submission ranked 843958 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is current...

Unfixed XSS vulnerability at www.mlowreyengraving.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.mlowreyengraving.com, which at the time of submission ranked 16150353 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It...

Unfixed XSS vulnerability at www.ufpl.fr

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.ufpl.fr, which at the time of submission ranked 5725712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

Slackware 13.37 / 14.0 / current : seamonkey (SSA:2012-326-01)

New seamonkey packages are available for Slackware 13.37, 14.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2012-326-01. The text itself is copyrigh...

Slackware Advisory SSA:2012-304-01 mozilla-thunderbird

The remote host is missing an update as announced via advisory SSA:2012-304-01. OpenVAS Vulnerability Test $Id: esoftslkssa201230401.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-304-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

APPLE-SA-2012-11-01-2 Safari 6.0.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-11-01-2 Safari 6.0.2 Safari 6.0.2 is now available and addresses the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.2 Impact: Visiting a maliciously crafted website may lead to an...

Unfixed XSS vulnerability at openclipart.org

Security researcher warvector, has submitted on 11/01/2012 a cross-site-scripting XSS vulnerability affecting openclipart.org, which at the time of submission ranked 16595 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Slackware 13.37 / 14.0 / current : mozilla-firefox (SSA:2012-300-01)

New mozilla-firefox packages are available for Slackware 13.37, 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2012-300-01. The text itself is...

Slackware Advisory SSA:2012-300-01 mozilla-firefox

The remote host is missing an update as announced via advisory SSA:2012-300-01. OpenVAS Vulnerability Test $Id: esoftslkssa201230001.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-300-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...