6344 matches found
GLSA-200609-17 : OpenSSH: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200609-17 OpenSSH: Denial of Service Tavis Ormandy of the Google Security Team discovered a Denial of Service vulnerability in the SSH protocol version 1 CRC compensation attack detector. Impact : A remote unauthenticated attacker...
osCommerce 2.1/2.2 - 'product_info.php' SQL Injection
source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...
DSA-1138-1 cfs - integer overflow
Bulletin has no description...
MS06-057 Microsoft Internet Explorer WebViewFolderIcon setSlice() Overflow
This module exploits a flaw in the WebViewFolderIcon ActiveX control included with Windows 2000, Windows XP, and Windows 2003. This flaw was published during the Month of Browser Bugs project MoBB 18. Module Options msf use exploit/windows/browser/ms06/057webviewsetslice msf...
SUSE-SA:2006:021: MozillaFirefox,mozilla
The remote host is missing the patch for the advisory SUSE-SA:2006:021 MozillaFirefox,mozilla. A number of security issues have been fixed in the Mozilla browser suite and the Mozilla Firefox browser. These problems could be used by remote attackers to gain privileges, gain access to confidential...
AnimeGenesis <= XSS
==================== Discovered by: Qex Date: 17 April 2006 ==================== index.php?cat=XSS...
Mercur Messaging 2005 IMAP Login Buffer Overflow
This module exploits a stack buffer overflow in Atrium Mercur IMAP 5.0 SP3. Since the room for shellcode is small, using the reverse ordinal payloads yields the best results. Module Options msf use exploit/windows/imap/mercur/login msf undefinedlogin show actions ...actions... msf undefinedlogin...
Fedora Core 4 : libc-client-2002e-17 (2005-1115)
The c-client library provides an API which allows applications to access and manipulate remote mail boxes. The library contains a bug in its mailvalidnetparse function. If an application allows untrusted input to be supplied to this function, its stack may become corrupted. This update backports...
Remote file include in Q-News
Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...
Check for Quote of the Day (qotd) Service (TCP)
The Quote of the Day qotd service is running on this host. SPDX-FileCopyrightText: 1999 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UPDATE: [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability
Gentoo Linux Security Advisory UPDATE GLSA 200506-17:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
GLSA-200505-17 : Qpopper: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200505-17 Qpopper: Multiple Vulnerabilities Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users CAN-2005-1151. The upstream developers discovered that Qpopper can be forced to creat...
Solaris 9 (x86) : 114504-17
SunOS 5.9x86: usr/sadm/lib/usermgr/VUserMgr.jar Patch. Date this patch was last updated by Sun : May/13/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Immunity Canvas: MDAEMON
Name| mdaemon ---|--- CVE| CVE-2004-2292 Exploit Pack| CANVAS Description| mdaemon imap Notes| CVSS: 5.0 Date public: 05/17/2004 VENDOR: Alt-N CVE Url: https://vulners.com/cve/CVE-2004-2292 CVE Name: CVE-2004-2292...
Solaris 9 (x86) : 114685-17
SunOS 5.9x86: Samba Patch. Date this patch was last updated by Sun : Dec/22/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (sparc) : 114684-17
SunOS 5.9: Samba Patch. Date this patch was last updated by Sun : Dec/22/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Microsoft SQL Server Payload Execution
This module executes an arbitrary payload on a Microsoft SQL Server by using the "xpcmdshell" stored procedure. Currently, three delivery methods are supported. First, the original method uses Windows 'debug.com'. File size restrictions are avoided by incorporating the debug bypass method present...
Update Rollup 17 for Exchange Server 2010 Service Pack 3 (KB4011326)
Update Rollup 17 for Exchange Server 2010 Service Pack 3 KB4011326...
