Debian DSA-2500-1 : mantis - several vulnerabilities

Several vulnerabilities were discovered in Mantis, an issue tracking system. - CVE-2012-1118 Mantis installation in which the privatebugviewthreshold configuration option has been set to an array value do not properly enforce bug viewing restrictions. - CVE-2012-1119 Copy/clone bug report actions...

linux/x86 Blind Port 1122 Connect shell code 101 bytes

====================================================== Linux x86 Blind Port 1122 Connect shell code 101 bytes ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Mp3 Cutter Joiner Local Buffer Overflow

Exploit for windows platform in category local exploits / Exploit Title: Mp3 Cutter Joiner Local Buffer Overflow Author: Angel Injection Date: /9/9/2011 Grups Inj3ct0r: http://www.facebook.com/groups/Inj3ct0r.Team/ Thanks to : Inj3ct0r Team sec-krb.org team / include include define pausescreen...

Ubuntu: Security Advisory (USN-1122-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: http-iis-webdav-vuln

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1122

The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors, aka Issue 71960...

CVE-2011-1122

The CVE-2011-1122 issue concerns Google Chrome/Chromium before 9.0.597.107, where the WebGL implementation allows remote attackers to cause a denial of service via an out-of-bounds read. Connected sources confirm the affected product as Google Chrome/Chromium and identify the vulnerability as Web...

Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasmanotify)

Check for the Version of firefox-ext-plasmanotify OpenVAS Vulnerability Test Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 firefox-ext-plasmanotify Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasmanotify)

Check for the Version of firefox-ext-plasmanotify OpenVAS Vulnerability Test Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 firefox-ext-plasmanotify Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:070-1)

Security issues were identified and fixed in firefox : Security researcher regenrecht reported via TippingPoint's Zero Day Initiative a potential reuse of a deleted image frame in Firefox 3.6's handling of multipart/x-mixed-replace images. Although no exploit was shown, re-use of freed memory has...

CVE-2010-1122

Technical details for CVE-2010-1122 are not provided in the connected documents. The materials reference other Firefox/WOFF issues but do not disclose affected components, versions, or fixes for this CVE. Monitor for updates.

Mandriva Update for blogtk MDVA-2010:070-1 (blogtk)

Check for the Version of blogtk OpenVAS Vulnerability Test Mandriva Update for blogtk MDVA-2010:070-1 blogtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

TCP may keep its offered receive window closed indefinitely (RFC 1122)

Overview Part of the Transmission Control Protocol TCP specification RFC 1122 allows a receiver to advertise a zero byte window, instructing the sender to maintain the connection but not send additional TCP payload data. The sender should then probe the receiver to check if the receiver is ready ...

CentOS Security Advisory CESA-2009:1122 (icu)

The remote host is missing updates to icu announced in advisory CESA-2009:1122. CESA-2009:1122 64328 2 $Id: ovcesa20091122.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1122 icu Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Microsoft IIS 5.0 WebDAV绕过认证漏洞(MS09-020)

BUGTRAQ ID: 35232 CVECAN ID: CVE-2009-1122 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS的WebDAV扩展没有正确解码特制请求的URL，导致WebDAV在处理该请求时应用不正确的配置。如果应用的配置允许匿名访问，则特制的请求可以绕过身份验证。 请注意IIS在配置的匿名用户帐户的安全上下文中仍会处理该请求，因此此漏洞不能用于绕过NTFS ACL，文件系统ACL对匿名用户帐户强加的限制将仍然执行。 Microsoft IIS 5.0 临时解决方法...

CVE-2009-1122

CVE-2009-1122 is the IIS WebDAV authentication bypass vulnerability associated with the MS09-020 family. The Initial Description notes an improper URL decode in IIS WebDAV that can bypass authentication and allow reading/creating files via crafted HTTP requests. Connected documents corroborate an...

Microsoft IIS Anonymous HTTP Request Authentication Bypass (MS09-020; CVE-2009-1122)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allow clients to publish, lock, and manage resources on the Web. An elevation of privilege vulnerability has been reported in the Microsoft Windows WebDAV extension for IIS. The vulnerability is due to an error i...

CVE-2009-1122

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8806 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/ms09020webdavunicodebypass.rb 2018-05-29...

Gentoo Security Advisory GLSA 200504-14 (monkeyd)

The remote host is missing updates announced in advisory GLSA 200504-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-1122

CVE-2008-1122 is a SQL injection vulnerability in Koobi Pro 5.7 (downloads module) that allows remote attackers to execute arbitrary SQL via the categ parameter to index.php. Connected sources confirm that Koobi CMS 4.2.4, 4.2.5, and 4.3.0 are affected as well; CVE-2008-1336 notes a related vulne...