CVE-2015-1852

OpenStack keystonemiddleware and python-keystoneclient are vulnerable to a man-in-the-middle attack when the paste.ini configuration’s insecure option is used. Specifically, the s3_token middleware in keystonemiddleware (and python-keystoneclient) disables TLS certificate verification if insecure...

WordPress LeagueManager Plugin 3.8 - SQL Injection

No description provided by source. !/usr/bin/ruby Exploit Title: WordPress LeagueManager Plugin v3.8 SQL Injection Google Dork: inurl:/wp-content/plugins/leaguemanager/ Date: 13/03/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://wordpress.org/extend/plugins/leaguemanager/ Software Link...

CVE-2013-1852

The CVE-2013-1852 issue affects the WordPress LeagueManager plugin prior to version 3.8.1, where an SQL injection vulnerability exists in the league_id parameter used by the leaguemanager_export flow. An attacker can exploit this via the leaguemanager-export page (wp-admin/admin.php) to inject ar...

Oracle Linux 6 : krb5-appl (ELSA-2011-1852)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1852 advisory. 1.0.1-7 - Correct patch, bump release 1.0.1-6 - Fix for CVE-2011-4862 Tenable has extracted the preceding description block directly from the Oracle Linux...

WordPress Plugin LeagueManager 3.8 - SQL Injection

WordPress Plugin LeagueManager 3.8 - SQL Injection !/usr/bin/ruby Exploit Title: WordPress LeagueManager Plugin v3.8 SQL Injection Google Dork: inurl:"/wp-content/plugins/leaguemanager/" Date: 13/03/13 Exploit Author: Joshua Reynolds Vendor Homepage:...

WordPress Plugin LeagueManager 3.8 - SQL Injection

!/usr/bin/ruby Exploit Title: WordPress LeagueManager Plugin v3.8 SQL Injection Google Dork: inurl:"/wp-content/plugins/leaguemanager/" Date: 13/03/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://wordpress.org/extend/plugins/leaguemanager/ Software Link:...

CVE-2012-1852

The CVE-2012-1852 entry describes a heap-based buffer overflow in the Remote Administration Protocol (RAP) handling within the LanmanWorkstation service on Windows XP SP2/SP3. The flaw allows remote code execution when an attacker sends crafted RAP response packets, enabling arbitrary code execut...

MS12-054: Vulnerabilities in Windows Networking Components Could Allow Remote Code Execution (2733594)

The remote Windows host is potentially affected by the following vulnerabilities : - A denial of service vulnerability exists in Windows networking components. The vulnerability is due to the service not properly handling specially crafted RAP requests. CVE-2012-1850 - A remote code execution...

Microsoft Remote Administration Protocol Heap and Stack Overflow (MS12-054; CVE-2012-1852, CVE-2012-1853)

A remote code execution vulnerability has been reported in the Microsoft Windows networking components...

CentOS Update for krb5-appl-clients CESA-2011:1852 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

HP Intelligent Management Center tftpserver.exe TFTP Packet Buffer Overflow (CVE-2011-1852)

A remote code execution has been reported in HP Intelligent Management Center. The vulnerability is due to an error in the tftpserver.exe component while processing DATA or ERROR TFTP packets. A remote attacker could exploit this vulnerability by sending a malformed TFTP packet to an affected...

HP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities

According to its version number, the HP Intelligent Management Center install on the remote host is potentially affected by multiple vulnerabilities : - A stack-based buffer overflow vulnerability exists in the 'img.exe' component. CVE-2011-1848 - A flaw exists in the 'tftpserver.exe' component...

CVE-2011-1852

HP IMC 5.0 before E0101L02 is affected by CVE-2011-1852 due to multiple stack-based buffer overflows in tftpserver.exe when handling DATA or ERROR TFTP packets, allowing remote arbitrary-code execution. The vulnerability is documented across HP’s security bulletin and multiple advisories; HP list...

Microsoft Internet Explorer Cross Site Data Leakage Vulnerability

This host is installed with Microsoft Internet Explorer web browser and is prone to cross site data leakage vulnerability. OpenVAS Vulnerability Test $Id: gbmsiecrosssitedataleakagevuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft Internet Explorer Cross Site Data Leakage Vulnerability...

CVE-2010-1852

CVE-2010-1852 concerns Microsoft Internet Explorer when the Invisible Hand extension runs. The cited data describe that cookies are used during background HTTP requests in an unexpected manner, which could allow remote web servers to identify users and their product searches via HTTP request logg...

Debian: Security Advisory (DSA-1852-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1852

CVE-2009-1852 covers multiple SQL injection vulnerabilities in Graphiks MyForum 1.3, allowing remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. The issue enables unauthenticated network access with partial confidentiality, integrity, and availability...

CVE-2009-1852

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8803...

Gentoo Security Advisory GLSA 200507-23 (kopete)

The remote host is missing updates announced in advisory GLSA 200507-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200507-26 (gnugadu centericq kadu ekg libgadu)

The remote host is missing updates announced in advisory GLSA 200507-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...