5969 matches found
FestOs <= 2.2.1 Multiple RFI Exploit
Exploit for unknown platform in category web applications ==================================== FestOs $reports header"Location:index.php"; include "includes/reportheader.php"; ? 3xplo!t : festospath/admin/reportsplacement.php?ABSOLUTEFILEPATH=Shell Code : FestOS.php...
Mercury/32 <= v4.01b PH Server Module Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury/32 %...
openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-6313)
The Sun JDK/JRE 5 was updated to Update 19 fixing various bugs and security issues. An exact list of changes published by Sun can be found on http://java.sun.com/j2se/1.5.0/ReleaseNotes.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
Gentoo Security Advisory GLSA 200909-19 (dnsmasq)
The remote host is missing updates announced in advisory GLSA 200909-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1017)
The Sun JDK/JRE 5 was updated to Update 19 fixing various bugs and security issues. An exact list of changes published by Sun can be found on http://java.sun.com/j2se/1.5.0/ReleaseNotes.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
HP-UX PHSS_38148 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 19
s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 19 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to gain unauthorized access...
Unfixed XSS vulnerability at www2.edu.fi
Security researcher DellNull, has submitted on 19/05/2009 a cross-site-scripting XSS vulnerability affecting www2.edu.fi, which at the time of submission ranked 312604 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...
CVE-2009-1739
creationtimestamp| type| source ---|---|--- 2009-05-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8735...
MDVA-2009:013 : phonon
Phonon in Mandriva Linux 2009.0 was not able to read files with a bracket in their filename. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security...
Solaris 8 (sparc) : 140837-01
SunOS 5.8: usr/bin/dircmp patch. Date this patch was last updated by Sun : Mar/19/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (sparc) : 138896-01
SunOS 5.9: usr/bin/dircmp patch. Date this patch was last updated by Sun : Mar/19/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Online Photo Pro 2.0 XSS
========================================================================================= Title : Cross-site Scripting XSS Vulnerability Software : Online Photo Pro v2.0 Vendor : www.esoftpro.com Date : 19 April 2009 Author : Vrs-hCk Contact : [email protected] Blog : c0li.BlogSpot.Com...
Unfixed Redirect vulnerability at spiderzbb.com
Security researcher Xylitol, has submitted on 19/04/2009 a Redirect vulnerability affecting spiderzbb.com, which at the time of submission ranked 337780 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/04/2009. It is currently unfixed. If you...
CVE-2009-4795
creationtimestamp| type| source ---|---|--- 2009-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32877...
Gentoo Security Advisory GLSA 200903-19 (xerces-c)
The remote host is missing updates announced in advisory GLSA 200903-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200903-19 (xerces-c)
The remote host is missing updates announced in advisory GLSA 200903-19. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability
Exploit for cgi platform in category web applications =============================================================== i-dreams GB 5.4 Final admin.dat File Disclosure Vulnerability ===============================================================...
CVE-2009-0034
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group aka %group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command...
53KF Web Instant Messenger Cross Site Scripting
Application: 53KF Web IM Vendor: www.53kf.com Corporation: LiuDu, Inc. Version: Latest: 19 JAN 2009 - Home Edition, Enterprise & Professional Description: 53KF Web IM 2009 Cross-Site Scripting Vulnerabilities Background: ============== 53KF is a web-based group chat tool that lets invite a client...