821 matches found
CVE-2010-3585
Oracle VM 2.2.x ovs-agent exposed XML-RPC endpoints allowing authenticated remote users to trigger command execution as root, leading to potential full compromise of the Oracle VM Server and its guests. Public records indicate an XML-RPC exposure enabling function calls not aligned with intended ...
CVE-2010-3583
CVE-2010-3583 is tied to Oracle VM 2.2.1, where the Oracle VM Agent (ovs-agent) exposes functions via XML-RPC. A vulnerability exists in the ovs-agent channel that can allow an authenticated, remote attacker to execute arbitrary OS commands, impacting confidentiality, integrity, and availability ...
CVE-2010-3582
CVE-2010-3582 concerns Oracle VM 2.2.1, where an input validation flaw in the Oracle VM Server Agent’s XML-RPC processing (utl_test_url) enables a remote authenticated attacker to inject commands with root privileges, compromising confidentiality, integrity, and availability. The issue is specifi...
UFO: Alien Invasion IRC Client (Windows) - Remote Buffer Overflow (Metasploit)
$Id: ufoai.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requir...
UFO: Alien Invasion IRC Client (OSX) - Remote Buffer Overflow (Metasploit)
$Id: ufoai.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requir...
UFO: Alien Invasion IRC Client Buffer Overflow
This module exploits a buffer overflow in the IRC client component of UFO: Alien Invasion 2.2.1. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UFO: Alien Invasion IRC Client Buffer Overflow',...
CSRF Vulnerability in OSSIM 2.2.1
================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...
OSSIM 2.2.1 CSRF Vulnerability
Exploit for php platform in category web applications ============================== OSSIM 2.2.1 CSRF Vulnerability ============================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com...
OSSIM 2.2.1 Cross Site Request Forgery
================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...
OSSIM 2.2.1 - $_SERVER[PHP_SELF] Cross-Site Scripting
OSSIM 2.2.1 - $SERVERPHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/39145/info OSSIM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
Multiple XSS vulnerabilities in OSSIM 2.2.1
================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...
OSSIM (repository_attachment.php) Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ===================================================================== OSSIM repositoryattachment.php Arbitrary File Upload Vulnerability ===================================================================== Vulnerable: OSSIM os-sim 2.1.5...
OSSIM v2.2 Multiple Vulnerabilities
Exploit for unknown platform in category web applications =================================== OSSIM v2.2 Multiple Vulnerabilities =================================== Advisory Name: Arbitrary File Download in OSSIM Vulnerability Class: Arbitrary File Download Release Date: 03-16-2010 Affected...
CVE-2009-4686
The CVE-2009-4686 entry describes a Cross-site scripting (XSS) vulnerability in the phplemon AdQuick 2.2.1 software, specifically in account.php where the red_url parameter can be exploited to inject arbitrary web script or HTML. Affected component: account.php. Root cause: insufficient input val...
CVE-2010-0675
Cross-site scripting XSS vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: some of these details are obtained from third party information...
CVE-2010-0675
CVE-2010-0675 affects BGSvetionik BGS CMS 2.2.1. The vulnerability is a Cross-site Scripting (XSS) in index.php that allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. Root cause is insufficient sanitization/validation of the search paramet...
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat...
CVE-2009-3308
SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands via the listingid parameter...
