VMSA-2010-0010:ESX 3.5 third party update for Service Console kernel

VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0010 VMware Security Advisory Synopsis: ESX 3.5 third party update for Service Console kernel VMware Security Advisory Issue date: 2010-06-24 VMware Securi...

Vulnerabilities in eSitesBuilder

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting and Insufficient Anti-automation уязвимостях в eSitesBuilder. Данные уязвимости я нашёл в 2007-2008 годах на одном сайте онлайн магазина а позже некоторые из этих уязвимостей я выявил и на другом сайте на данном движке. А...

Symantec AppStream / Workspace Streaming Remote Code Execution (SYM10-008)

The version of Symantec AppStream or Symantec Workspace Streaming running on the remote host has a remote code execution vulnerability. The client does not properly authenticate to the server before downloading available files. A remote attacker could exploit this by setting up a rogue Workspace...

Fedora Update for python FEDORA-2010-9652

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

HP Operations Manager hidden Tomcat account

Added: 06/18/2010 CVE: CVE-2009-3843 BID: 37086 OSVDB: 60317 Background HP Operations Manager is a consolidated event and performance management console that correlates infrastructure, network and end-user experience events across an IT infrastructure. Problem A hidden Apache Tomcat account allow...

HP Operations Manager hidden Tomcat account

Added: 06/18/2010 CVE: CVE-2009-3843 BID: 37086 OSVDB: 60317 Background HP Operations Manager is a consolidated event and performance management console that correlates infrastructure, network and end-user experience events across an IT infrastructure. Problem A hidden Apache Tomcat account allow...

CVE-2008-4389

Symantec AppStream 5.2.x and Symantec Workspace Streaming 6.1.x before 6.1 SP4 have an authentication flaw that allows a remote, rogue Workspace Streaming server to cause clients to download arbitrary executables and execute them, enabling arbitrary code execution on the client. Affected componen...

Symantec AppStream and Workspace Streaming vulnerable to arbitrary code download and execution

Overview The Symantec AppStream and Workspace Streaming clients fail to properly validate downloads, which can allow a remote, unauthenticated attacker to download and execute arbitrary code on a vulnerable system. Description Symantec Workspace Streaming is a software distribution solution that...

Symantec Workspace Streaming Potential Unauthorized Downloads

SUMMARY Symantecs Workspace Streaming client fails to properly authenticate with the Symantec Workspace Streaming server when downloading files. This could potentially lead to unauthorized download of arbitrary code to a client system. AFFECTED PRODUCTS Products Affected Product | Version | Build...

Apache Tomcat 5.x < 5.5.1 Information Disclosure

According to its self-reported version number, the instance of Apache Tomcat 5.x listening on the remote host is prior to 5.5.1. It is, therefore, affected by an information disclosure vulnerability. Specifically, it may allow requests from a non-permitted IP address to gain access to a context...

Microsoft Visual Studio Mdmask32.ocx ActiveX Buffer Overflow

This module exploits a stack buffer overflow in Microsoft's Visual Studio 6.0. When passing a specially crafted string to the Mask parameter of the Mdmask32.ocx ActiveX Control, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

SasCam 2.6.5 - Remote HTTP Server Crash

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! Also the free software programs provided by fl0 fl0w may be freely distributed and that the disclaimer below is always attached to it. The programs are provided as is without...

Tumbleweed SecureTransport FileTransfer - 'vcst_eu.dll' ActiveX Control Buffer Overflow (Metasploit)

$Id: tumbleweedfiletransfer.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mandriva Update for perl MDVSA-2010:116 (perl)

Check for the Version of perl OpenVAS Vulnerability Test Mandriva Update for perl MDVSA-2010:116 perl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2008-0311

creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16434 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/borlandstarteam.rb 2025-02-06 03:13:38+00:00| seen|...

Quick TFTP Server Pro 2.1 - Transfer-Mode Overflow (Metasploit)

$Id: quicktftppromode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Borland CaliberRM - StarTeam Multicast Service Buffer Overflow (Metasploit)

$Id: borlandstarteam.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Mandriva Update for perl MDVSA-2010:116 (perl)

Check for the Version of perl OpenVAS Vulnerability Test Mandriva Update for perl MDVSA-2010:116 perl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Linux Security Advisory : perl (MDVSA-2010:116)

Multiple vulnerabilities has been discovered and corrected in Path.pm and Safe.pm which could lead to escalated privilegies CVE-2008-5302, CVE-2008-5303, CVE-2010-1168, CVE-2010-1447. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security,...

Cross-site Scripting (XSS) Vulnerabilities in PortalApp

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PortalApp which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in PortalApp 1.1 The vulnerability exists due to input sanitation error in multiple parameters ...