Solaris 10 (x86) : 138266-01 (deprecated)

SunOS 5.10x86: picld patch. Date this patch was last updated by Sun : Nov/07/08 This plugin has been deprecated and either replaced with individual 138266 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 138105-01

SunOS 5.10x86: snoop patch. Date this patch was last updated by Sun : Nov/07/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 138387-01

SunOS 5.10: libc.so.1.9 patch. Date this patch was last updated by Sun : Nov/07/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 138361-01 (deprecated)

SunOS 5.10: snmpXdmid patch. Date this patch was last updated by Sun : Nov/07/08 This plugin has been deprecated and either replaced with individual 138361 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Discuz! flash csrf vul

Discuz!的安全人员已经意识到csrf方面的漏洞了采用了formhash及判断Referer等来防止外部提交,如果看过Bypass Preventing CSRF1一文的朋友应该意识到我们可以通过flash来进行csrf攻击. 首先我们看Discuz!6开始自带了crossdomain.xml文件,代码如下: ?xml version="1.0"? cross-domain-policy allow-access-from domain="" / /cross-domain-policy 允许容易域的访问,对于Discuz!的formhash我们可以通过as来处理得到如下代码:...

Fixed XSS vulnerability at www.hellboundhackers.org

Security researcher Uber0n, has submitted on 11/01/2008 a cross-site-scripting XSS vulnerability affecting www.hellboundhackers.org, which at the time of submission ranked 130037 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/01/2008. It is...

irix rpc.passwd overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: sgirpcpasswd.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: irix rpc.passwd overflow Authors: Renaud Deraison Copyright:...

Solaris 5.9 (x86) : 139383-01

GNOME 2.0.2x86: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.9 (sparc) : 139382-01

GNOME 2.0.2: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Gentoo Security Advisory GLSA 200810-01 (wordnet)

The remote host is missing updates announced in advisory GLSA 200810-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Unfixed XSS vulnerability at zorak.monmouth.edu

Security researcher Mutant, has submitted on 10/01/2008 a cross-site-scripting XSS vulnerability affecting zorak.monmouth.edu, which at the time of submission ranked 165415 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/02/2008. It is...

ADN Forum <= 1.0b Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================= ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit;...

CVE-2008-6097

creationtimestamp| type| source ---|---|--- 2008-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32450...

CVE-2008-6102

creationtimestamp| type| source ---|---|--- 2008-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6650...

Gentoo Security Advisory GLSA 200607-01 (mpg123)

The remote host is missing updates announced in advisory GLSA 200607-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200403-01 (libxml)

The remote host is missing updates announced in advisory GLSA 200403-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200809-01 (yelp)

The remote host is missing updates announced in advisory GLSA 200809-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-01 (denyhosts)

The remote host is missing updates announced in advisory GLSA 200701-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200704-01 (asterisk)

The remote host is missing updates announced in advisory GLSA 200704-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200506-01 (binutils)

The remote host is missing updates announced in advisory GLSA 200506-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...