164 matches found
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:1957-1)
update to Thunderbird 24.2.0 bnc854370 - requires NSS 3.15.3.1 or higher - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-108/CVE-2013-5616 bmo938341 Use-after-free in event listeners - MFSA 2013-109/CVE-2013-5618 bmo926361 Use-after-free during Table...
Amazon Linux AMI : bind (ALAS-2012-113)
An uninitialized data structure use flaw was found in BIND when DNSSEC validation was enabled. A remote attacker able to send a large number of queries to a DNSSEC validating BIND resolver could use this flaw to cause it to exit unexpectedly with an assertion failure. CVE-2012-3817 C Tenable...
CMSLogik 1.2.1 Shell Upload
!/usr/bin/python CMSLogik 1.2.1 uploadfileajax Shell Upload Exploit Vendor: ThemeLogik Product web page: http://www.themelogik.com/cmslogik Affected version: 1.2.1 and 1.2.0 Summary: CMSLogik is built on a solid & lightweight framework called CodeIgniter, and design powered by Bootstrap. This...
Nmap NSE 6.01: auth-owners
Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. OpenVAS Vulnerability Test $Id: gbnmap6authowners.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE...
IBM Rational ClearQuest CQOle Remote Code Execution
This module exploits a function prototype mismatch on the CQOle ActiveX control in IBM Rational ClearQuest use exploit/windows/browser/clear/questcqole msf undefinedquestcqole show actions ...actions... msf undefinedquestcqole set ACTION msf undefinedquestcqole show options ...show and set...
WordPress AdRotate 3.6.5 SQL Injection
Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ifisset$GET'track' OR $GET'track' != '' $meta = urldecode$GET'track'; ... list$ad, $group, $block = explode"-", $meta; ... $bannerurl = $wpdb-getvar"SELEC...
Toko Lite CMS 1.5.2 HTTP Response Splitting
Toko Lite CMS 1.5.2 edit.php HTTP Response Splitting Vulnerability Vendor: Toko Product web page: http://toko-contenteditor.pageil.net Affected version: 1.5.2 Summary: Toko Web Content Editor cms is a compact, multi language, open source web editor and content management system CMS. It is advance...
Zend Server Java Bridge Arbitrary Java Code Execution
$Id: zendjavabridge.rb 12242 2011-04-05 01:08:07Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Zend Java Bridge - Remote Code Execution (ZDI-11-113)
Exploit for multiple platform in category remote exploits / Zend Java Bridge v3.1 - Remote Code Execution ZDI-11-113 Copyright c 2010 Luca Carettoni ZJB.java v0.2 - 4 August 2010 Usage java -jar zjb.jar '' Default: 10001/tcp Version affected Zend Server v5.0.2, Zend Server Community Edition v5.0....
Zend Java Bridge - Remote Code Execution
/ Zend Java Bridge v3.1 - Remote Code Execution ZDI-11-113 Copyright c 2010 Luca Carettoni ZJB.java v0.2 - 4 August 2010 Usage java -jar zjb.jar '' Default: 10001/tcp Version affected Zend Server v5.0.2, Zend Server Community Edition v5.0.2 and previous releases...
Zend Java Bridge - Remote Code Execution
Zend Java Bridge - Remote Code Execution / Zend Java Bridge v3.1 - Remote Code Execution ZDI-11-113 Copyright c 2010 Luca Carettoni ZJB.java v0.2 - 4 August 2010 Usage java -jar zjb.jar '' Default: 10001/tcp Version affected Zend Server v5.0.2, Zend Server Community Edition v5.0.2 and previous...
JV2 Folder Gallery 3.1 - 'gallery.php' Remote File Inclusion
----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ------------------------------------------------------------ Remote File Inclusion Vulnerability...
Mandriva Security Advisory MDVSA-2009:113-1 (cyrus-sasl)
The remote host is missing an update to cyrus-sasl announced via advisory MDVSA-2009:113-1. OpenVAS Vulnerability Test $Id: mdksa20091131.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:113-1 cyrus-sasl Authors: Thomas Reinke Copyright: Copyright c...
Mandrake Security Advisory MDVSA-2009:113 (cyrus-sasl)
The remote host is missing an update to cyrus-sasl announced via advisory MDVSA-2009:113. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Check for ident Service
The remote host is running an ident daemon. The Ident Protocol is designed to work as a server daemon, on a user SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
HTTP Response Splitting and file inclusion vulnerability.
PMASA-2009-1 Announcement-ID: PMASA-2009-1 Date: 2009-03-24 Summary HTTP Response Splitting and file inclusion vulnerability. Description The BLOB streaming feature allowed attacker to include arbitrary files and inject HTTP headers using crafted URL parameters. Severity We consider this...
Linux/x86 - Bind TCP (3879/TCP) Shell (/bin/sh) Shellcode (113 bytes)
Linux/x86 - Bind TCP 3879/TCP Shell /bin/sh Shellcode 113 bytes. Shellcode exploit for Linuxx86 platform / Connecting shellcode written by lamagra http://lamagra.seKure.de May 2000 .file "connect" .version "01.01" .text .align 4 start: socketAFINET,SOCKSTREAM,IPPROTOIP; movl %esp,%ebp xorl...
Debian Security Advisory DSA 113-1 (ncurses)
The remote host is missing an update to ncurses announced via advisory DSA 113-1. OpenVAS Vulnerability Test $Id: deb1131.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 113-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 113-1 (ncurses)
The remote host is missing an update to ncurses announced via advisory DSA 113-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
