120 matches found
Mageia: Security Advisory (MGASA-2016-0098)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : giflib (openSUSE-2016-118)
This update for giflib fixes the following issues : - CVE-2015-7555: Heap overflow in giffix bsc960319 - bsc949160: Fix a memory leak This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
118 Telecom Cross Site Scripting
----------------------------------------------------------------------------------- Exploit Title : 118 Telecom's website of Iran XSS Vulnerability Exploit Author : 4TT4CK3R HomePage : http://118.tct.ir Tested on : Windows , Firefox Discovered by : 4TT4CK3R Category : WebApp Date : 2016/01/22...
Amazon Linux: Security Advisory (ALAS-2012-118)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HTTP Strict Transport Security - Moderately Critical - Logical Error - SA-CONTRIB-2015-118
The contributed HSTS module makes it easy for site administrators to implement HTTP Strict Transport Security HSTS by setting the Strict-Transport-Security header on each page generated by Drupal. HSTS module provides a configuration UI for the HSTS "include subdomains" directive, which indicates...
Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability
No description provided by source. $Id: osbunamejlist.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Amazon Linux AMI : kernel (ALAS-2012-118)
The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket. C Tenable Network...
Slackware Advisory SSA:2009-118-01 mozilla-firefox
The remote host is missing an update as announced via advisory SSA:2009-118-01. OpenVAS Vulnerability Test $Id: esoftslkssa200911801.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
EMC AutoStart ftAgent Multiple Remote Code Execution Vulnerabilities (ESA-2012-020)
The version of EMC AutoStart on the remote host reportedly contains multiple remote code execution vulnerabilities : - The EMC AutoStart ftAgent, when processing messages with opcode 0x32 and subcode 0x04, opcode 0x32 and subcode 0x02, opcode 0x03 and subcode 0x04, opcode 0x55 and subcode 0x16,...
Unfixed XSS vulnerability at 118.tct.ir
Security researcher a3q, has submitted on 21/02/2012 a cross-site-scripting XSS vulnerability affecting 118.tct.ir, which at the time of submission ranked 26311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is currently unfixed...
Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability
$Id: osbunamejlist.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Oracle Secure Backup Authentication Bypass/Command Injection
Exploit for php platform in category web applications $Id: osbunamejlist.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensin...
Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability
This module exploits an authentication bypass vulnerability in login.php in order to execute arbitrary code via a command injection vulnerability in propertybox.php. This module was tested against Oracle Secure Backup version 10.3.0.1.0 Win32. This module requires Metasploit:...
Mandrake Security Advisory MDVSA-2009:118 (kernel)
The remote host is missing an update to the kernel announced via advisory MDVSA-2009:118. OpenVAS Vulnerability Test $Id: mdksa2009118.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:118 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...
Mandriva Update for udev MDVA-2008:084 (udev)
Check for the Version of udev OpenVAS Vulnerability Test Mandriva Update for udev MDVA-2008:084 udev Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Mandriva Update for net-snmp MDVSA-2008:118 (net-snmp)
Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVSA-2008:118 net-snmp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
DTSA-118-1 ldm - authentication bypass
Bulletin has no description...
rsa-xss.txt
The following security report has been sent to RSA/EMC on the 2/10/2007 and confirmed by them. RSA took action to alert their customers. ----------------------------------------- Description The WebID authentication framework suffers from a flow allowing to steal an authenticated users's session ...
Debian DSA-118-1 : xsane - insecure temporary files
Tim Waugh found several insecure uses of temporary files in the xsane program, which is used for scanning. This was fixed for Debian/stable by moving those files into a securely created directory within the /tmp directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
