CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

Solaris Update for OpenWindows 3.6.1 108117-06

Check for the Version of OpenWindows 3.6.1 OpenVAS Vulnerability Test Solaris Update for OpenWindows 3.6.1 108117-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for OpenWindows 3.6.1 108117-06

Check for the Version of OpenWindows 3.6.1 OpenVAS Vulnerability Test Solaris Update for OpenWindows 3.6.1 108117-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris 9 (sparc) : 123921-12

Sun Management Center 3.6.1: Patch for Solaris 9. Date this patch was last updated by Sun : Nov/25/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Solaris 9 (sparc) : 125192-04

Sun Management Centre 3.6.1 PRM: Patch for Solaris 9. Date this patch was last updated by Sun : Feb/27/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Openfire Multiple Vulnerabilities (Mar09)

This host is running Openfire and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodopenfiremultvulnmar09.nasl 5122 2017-01-27 12:16:00Z teissa $ Openfire Multiple Vulnerabilities Mar09 Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

Openfire < 3.6.1 Multiple Vulnerabilities

Openfire is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:igniterealtime:openfire";...

Sun管理中心性能报表模块跨站脚本漏洞

BUGTRAQ ID: 33999 Sun Management Center软件是开放的、可扩展的系统监视和管理方案。 Sun管理中心的性能报表模块中存在跨站脚本漏洞，可能允许远程非特权用户在用户浏览器中执行任意JavaScript代码，或窃取可能用于访问Sun管理中心Web控制台的会话cookie。 Sun SunMC 4.0 Sun SunMC 3.6.1 厂商补丁： Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-247046）以及相应补丁: Sun-Alert-247046：Cross Site Scripting XSS Vulnerability in...

IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service

IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service source: https://www.securityfocus.com/bid/33169/info IBM WebSphere DataPower XML Security Gateway XS40 is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input. Remote...

Gentoo Security Advisory GLSA 200410-11 (tiff)

The remote host is missing updates announced in advisory GLSA 200410-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200410-11 (tiff)

The remote host is missing updates announced in advisory GLSA 200410-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

vBulletin 3.6.1 Remote SQL Injection Exploit

Exploit for perl platform in category web applications ============================================ vBulletin 3.6.1 Remote SQL Injection Exploit ============================================ !/usr/bin/perl use IO::Socket; print q DeluxeBB Remote SQL Injection Exploit vbulletin Remote SQL Injection...

Sun Management Center不安全默认帐户未授权访问漏洞

Sun Management Center是一款开放的、可扩展的系统监视和管理方案。 Sun Management Center包含的Oracle数据库组件存在默认帐户，远程攻击者可以利用漏洞通过这个帐户未授权访问数据库或以数据库服务进程权限执行任意代码。 目前没有详细漏洞细节提供。 Sun SunMC 3.6.1 Sun SunMC 3.6 Sun SunMC 3.5 update 补丁下载： Sun SunMC 3.5 update 1 Sun 118388-11 Solaris 8...

SOL2617 - Reverse name resolution vulnerability in SSH - CVE-2003-0386

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...

Crob FTP Server 3.6.1 build 263 - LISTNLST Denial of Service

Crob FTP Server 3.6.1 build 263 - LISTNLST Denial of Service import sys,os,string import socket import struct import time print "-----------------------------------------------------------------------" print " Crob FTP Server 3.6.1 b.263 LIST, NLST and NLST -al Denial of Service" print " url:...

vbulletin361.txt

Author: insanity E-mail: [email protected] XSS vBulletin 3.6.1 Admin Control Panel http://www.exemplo.com/vbulletin/admincp/index.php?do=buildnavprefs&nojs=0&prefs="alert"insanity" http://www.exemplo.com/vbulletin/admincp/index.php?do=savenavprefs&nojs=0&navprefs="alert"insanity"...

Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities

Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15951/info Liferay Portal Enterprise is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15951/info Liferay Portal Enterprise is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

CVE-2005-1873

Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via 1 an FTP command with a large string followed by the RMD command with a long string or 2 a globbing "" character followed by a long string...