HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Buffer Overflow (Metasploit)

$Id: hpnnmovwebhelp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

SuSE9 Security Update : MySQL (YOU Patch Number 12661)

The following bugs have been fixed : - local users could delete data files for tables of other users. CVE-2010-1626 - authenticated users could gather information for tables they should not have access to. CVE-2010-1849 - authenticated users could crash mysqld. CVE-2010-3683, CVE-2010-3681,...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

CVE-2009-5015

CVE-2009-5015 affects TurboGears2 (tg2) prior to 2.0.2, where the URL dispatch mechanism exposes controller methods even if @expose is not used. The description notes unspecified impact and attack vectors; the provided connected documents do not elaborate on the root cause, affected components be...

CVE-2009-5014

CVE-2009-5014 affects TurboGears2 (tg2) in its default quickstart config prior to 2.0.2, where a weak cookie salt allows remote attackers to bypass repoze.who authentication via a forged authorization cookie. This vulnerability is closely related to CVE-2010-3852 (Luci) in that both describe inse...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

Fedora 12 : pyftpdlib-0.5.2-1.fc12 (2010-16731)

Tue Oct 26 2010 Silas Sewell - 0.5.2-1 - Update to 0.5.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Sql injection

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033...

Rising 2009 Denial Of Service

/ On the net.We can found these file has published a BUG.In that.The BUG has found in CONTROL CODE:0x83003C0B.So.I check these file in othere CONTROL CODE.Just for fun..... Exploit Title: Rising RSNTGDI.sys Local Denial of ServiceCONTROL CODE:83003C13 Date: 2010.11.1 Author: ze0r Version: Rising...

Rising - RSNTGDI.sys Local Denial of Service

Rising - RSNTGDI.sys Local Denial of Service / On the net.We can found these file has published a BUG.In that.The BUG has found in CONTROL CODE:0x83003C0B.So.I check these file in othere CONTROL CODE.Just for fun..... Exploit Title: Rising RSNTGDI.sys Local Denial of ServiceCONTROL CODE:83003C13...

Rising - 'RSNTGDI.sys' Local Denial of Service

/ On the net.We can found these file has published a BUG.In that.The BUG has found in CONTROL CODE:0x83003C0B.So.I check these file in othere CONTROL CODE.Just for fun..... Exploit Title: Rising RSNTGDI.sys Local Denial of ServiceCONTROL CODE:83003C13 Date: 2010.11.1 Author: ze0r Version: Rising...

Mandriva Linux Security Advisory : python (MDVSA-2010:215)

Multiple vulnerabilities was discovered and corrected in python : Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service application crash via a large ZSIZE value in a black-and-white aka B/W RGB image that triggers an invalid pointer dereference...

Mongoose Web Server 2.11 - Directory Traversal

Exploit Title: Mongoose 2.11 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://mongoose.googlecode.com/files/mongoose-2.11.exe Version: 2.11 Windows Version Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

Mongoose Web Server 2.11 Directory Traversal

Exploit Title: Mongoose 2.11 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://mongoose.googlecode.com/files/mongoose-2.11.exe Version: 2.11 Windows Version Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010:0807)

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

openSUSE Security Update : php5-pear-mail (openSUSE-SU-2010:0909-1)

Passing specially crafted $from and $recepient arguments to php5-pear-mail's sendmail.php allowed attackers to inject shell code CVE-2009-4023, CVE-2009-4111. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2010-4097

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...