http-iis-webdav-vuln NSE Script

Checks for a vulnerability in IIS 5.1/6.0 that allows arbitrary users to access secured WebDAV folders by searching for a password-protected folder and attempting to access it. This vulnerability was patched in Microsoft Security Bulletin MS09-020, . A list of well known folders almost 900 is use...

MDVA-2008:020 : drakbt

A minor bug in drakbt was causing it to crash when opening some dialogs such as the help. This update corrects the bug. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

SA-CONTRIB-2009-020 - Print - Cross site scripting

The Printer, e-mail and PDF versions "Print" module provides printer-friendly versions of content. The module does not correctly escape content titles, enabling malicious users to insert arbitrary HTML and scripts into certain pages. Such a cross site scripting XSS attack against sufficiently...

Mandrake Security Advisory MDVSA-2009:020 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:020. OpenVAS Vulnerability Test $Id: mdksa2009020.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:020 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

SuSE Update for cups SUSE-SA:2008:020

Check for the Version of cups OpenVAS Vulnerability Test $Id: gbsuse2008020.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for cups SUSE-SA:2008:020 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Altiris Deployment Solution Server < 6.9.355 Password Disclosure (SYM08-020) (deprecated)

Binary data 4772.prm...

Modify the Exploit to experience a local elevation of Privilege fun-vulnerability warning-the black bar safety net

Vulnerability is like 8 months of rain like a short month, it cropped up several! Each of the security sites are constantly in the headlines reported in the latest vulnerability message, the heat as much as the Olympics. But these loopholes, really can for newbies service is few and far between!...

MS03-020 Microsoft Internet Explorer Object Type

This module exploits a vulnerability in Internet Explorer's handling of the OBJECT type attribute. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS03-020 Microsoft Internet Explorer Object...

Microsoft Windows DNS Client Spoofing Vulnerability (MS08-020, 945553)

The remote host is probably affected by the vulnerability described in CVE-2008-0087 SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows DNS客户端可预测事件处理ID漏洞（MS08-020）

BUGTRAQ ID: 28553 CVECAN ID: CVE-2008-1085 Microsoft Windows是微软发布的非常流行的操作系统。 Windows DNS客户端服务在执行DNS查询时，随机选择事件处理值没有提供足够的熵。未经认证的攻击者可以向有漏洞客户端的DNS请求返回恶意响应，欺骗或重新定向合法位置的Internet通讯。 Microsoft Windows XP SP2 Microsoft Windows Vista Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1...

Internet Explorer Content Advisor memory corruption

Added: 06/20/2007 CVE: CVE-2005-0555 BID: 13117 OSVDB: 15466 Background The Content Advisor is used to control what content is viewable in Internet Explorer. Problem A memory corruption vulnerability in the Content Advisor allows command execution when a user loads a specially crafted page in...

Macromedia Flash Player数组索引内存访问漏洞(MS06-020)

Macromedia Flash Player是一款非常流行的FLASH播放器。 Macromedia Flash Player用于播放SWF文件的Flash.ocx代码中存在漏洞，成功利用这个漏洞的攻击者可以远程执行任意代码。 其中的一个函数栈维护有256个元素的函数指针表，没有强制数组边界便将从SWF文件读取的帧类型标识符用作了数组索引。以下反汇编描述了受影响的代码： .text:1002714F mov eax, esi+0CA4h ; type number .text:10027155 mov ecx, esi+94h ; base of table .text:1002715...

MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)

No description provided by source. / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\tes...

MS Internet Explorer Object Tag Exploit (MS03-020)

No description provided by source. !/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url://$shellcode'/'x48jmp %ptrsh the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near...

Fully Modded phpBB 2021.4.40 - Multiple File Inclusions

Fully Modded phpBB 2 Remote File Include PHPBB Exploit 2 Source Code: http://phpbbfm.net/support/indexfm.php http://kent.dl.sourceforge.net/sourceforge/phpbbfm/FM2021-4-40.tar.gz Vulnerable Code: include'includes/common.php'; $phpbbrootpath = $foingrootpath . $phpbbrootpath; In ./faq.php...

Internet Explorer DHTML object vulnerability

Added: 04/25/2006 CVE: CVE-2005-0553 BID: 13120 OSVDB: 15465 Background Dynamic HTML DHTML allows the creation of interactive web pages. Problem Race conditions in various DHTML methods could allow command execution when a specially crafted web page is loaded in Internet Explorer. Resolution Appl...

Flash Player swf Processing Multiple Unspecified Code Execution (APSB06-03)

According to its version number, the instance of Flash Player on the remote Windows host contains multiple critical and as-yet unspecified vulnerabilities that could allow an attacker to take control of the affected host. To exploit these issues, a user must load a malicious SWF file in Flash...

Microsoft Internet Explorer 5.01, 5.5, 6.0 Cumulative Patch (890923, MS05-020)

The July 2004 Cumulative Patch for IE is not applied on the remote host. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also supersedes...

Microsoft Internet Explorer DHTML objects contain a race condition

Overview A race condition in the way that Internet Explorer handles DHTML objects may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft:Dynamic HTML DHTML is built on an object model that extends the traditional static HTML document which...

Microsoft Internet Explorer Content Advisor contains a buffer overflow

Overview A buffer overflow in Microsoft Internet Explorer Content Advisor may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Content Advisor is used to control what content is viewable in Internet Explorer. A buffer overflow exists in the routines that...