Sun Solaris 10 - 'rpc.ypupdated' Remote Code Execution

Sun Solaris = 10 rpc.ypupdated Remote Root Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20259.tar.gz 2008-ypk2008.tar.gz milw0rm.com 2008-03-20...

Centreon 1.4.2.3 - 'get_image.php' Remote File Disclosure

!/usr/bin/python Date : 20/01/2008 Author : Julien CAYSSOL import sys, urllib2,re useragent = 'Mozilla/6.0 compatible; MSIE 6.0; Windows NT' headers = 'User-Agent' : useragent , 'Accept-Charset' : 'ISO-8859-15' if name == "main": if lensys.argv==2: host = sys.argv1 print " + Host : " + host url =...

Unfixed XSS vulnerability at www.informatist.net

Security researcher Uber0n, has submitted on 20/02/2008 a cross-site-scripting XSS vulnerability affecting www.informatist.net, which at the time of submission ranked 318654 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Fedora 7 : icu-3.6-20.fc7 (2008-1076)

CVE-2007-4770 & CVE-2007-4771 Flaws in icu regexp handling. Technical details can be found at http://sourceforge.net/mailarchive/message.php?msgname= d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%2540mail.gmail.com Note that Tenable Network Security has extracted the preceding description block...

Debian Security Advisory DSA 103-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 103-1. OpenVAS Vulnerability Test $Id: deb1031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 103-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 103-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 103-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 8 : bind-9.5.0-20.b1.fc8 (2007-4655)

bind-chroot-admin called restorecon on /proc filesystem 405281 - 9.5.0b1 release 405281, 392491 - stop with initscript will fail if rndc was disabled 417431 - fixed IDN support in dig and host utilities 412241 - added dst/gssapi.h to -devel subpackage 419091 - CVE-2007-6283 - /etc/rndc.key file...

Unfixed XSS vulnerability at www.caenlamer.fr

Security researcher TreX, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.caenlamer.fr, which at the time of submission ranked 625309 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currently...

Unfixed XSS vulnerability at www.yetanotherreviewsite.co.uk

Security researcher Persian Fox, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.yetanotherreviewsite.co.uk, which at the time of submission ranked 924639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Flash Player < 9.0.115.0 / 7.0.73.0 APSB07-20 Multiple Vulnerabilities

Binary data 4322.prm...

Flash Player < 7.0.73.0 / 9.0.115.0 Multiple Vulnerabilities (APSB07-20)

According to its version number, the instance of Flash Player on the remote Windows host is affected by multiple issues, including several which could allow for arbitrary code execution by means of a malicious SWF file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities

SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell...

SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities

SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell /loadphplib.php?PHPLIBlibdir=Shell...

Unfixed XSS vulnerability at www.ellisislandrecords.org

Security researcher Uber0n, has submitted on 20/11/2007 a cross-site-scripting XSS vulnerability affecting www.ellisislandrecords.org, which at the time of submission ranked 303097 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It ...

GLSA-200711-20 : Pioneers: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200711-20 Pioneers: Multiple Denials of Service Roland Clobus discovered that the Pioneers server may free sessions objects while they are still in use, resulting in access to invalid memory zones CVE-2007-5933. Bas Wijnen...

CVE-2002-2307

The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20...

Solaris 8 (sparc) : 124672-20

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful...

Solaris 10 (sparc) : 125952-20 (deprecated)

Oracle Java Web Console 3.1. Date this patch was last updated by Sun : May/14/10 This plugin has been deprecated and either replaced with individual 125952 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 9 (sparc) : 125950-20

Oracle Java Web Console 3.1. Date this patch was last updated by Sun : May/14/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 125953-20 (deprecated)

Oracle Java Web Console 3.1x86. Date this patch was last updated by Sun : May/14/10 This plugin has been deprecated and either replaced with individual 125953 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...