Debian: Security Advisory (DSA-3542-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

vBulletin 3.7.3 - Visitor Message CSRF + Worm Exploit

No description provided by source. / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 softwa...

CVE-2013-7196

PHPFox 3.7.3–3.7.5 contains a flaw in static/ajax.php that allows remote authenticated users to bypass the "Only Me" privacy setting and post a comment on private publications by manipulating the val[item_id] parameter. The root cause is insufficient access control in AJAX comment/like handling, ...

PHPFox - Access Control Security Bypass

PHPFox - Access Control Security Bypass source: https://www.securityfocus.com/bid/66677/info PHPFox is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization. Attackers can leverage this issue to bypass security restrictions and perform...

PHPFox - Access Control Security Bypass

source: https://www.securityfocus.com/bid/66677/info PHPFox is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization. Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in...

X2Engine 3.7.3 Cross Site Scripting / Shell Upload / SQL Injection

============================================================== Title ...| Multiple vulnerabilities in X2Engine Version .| X2Engine 3.7.3 Date ....| .02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + For admin logged in...

Fedora 18 : filezilla-3.7.3-1.fc18 (2013-14794)

Merge further fixes from PuTTY to address CVE-2013-4206, CVE-2013-4207, CVE-2013-4208 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Vino VNC Server Remote Denial Of Service Vulnerability

This host is running Vino VNC Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvinovncdosvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ Vino VNC Server Remote Denial Of Service Vulnerability Authors: Veerendra GG Copyright: Copyright c 2013 Greenbone Network...

PT-2013-1101 · Debian +2 · Debian +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7.3 Description: The issue allows physically proximate attackers to cause a denial of service system hang via a crafted filesystem on removable media. This is due to the ext4 orphan del function in...

Fedora 17 : kernel-3.7.3-101.fc17 (2013-1025)

Rebase to Linux v3.7.3. A large number of bug fixes across the entire tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

WordPress Register Plus Redux Plugin Multiple Cross-Site Scripting Vulnerabilities

WordPress Register Plus Redux Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Bugzilla Informaton Disclosure Vulnerability

This host is running Bugzilla and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbbugzillainfodisclosurevuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Bugzilla Informaton Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone Networks...

Solaris Update for OpenWindows 3.7.3 119903-02

Check for the Version of OpenWindows 3.7.3 OpenVAS Vulnerability Test Solaris Update for OpenWindows 3.7.3 119903-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for OpenWindows 3.7.3 119903-02

Check for the Version of OpenWindows 3.7.3 OpenVAS Vulnerability Test Solaris Update for OpenWindows 3.7.3 119903-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2008-6256

CVE-2008-6256 affects vBulletin up to 3.7.3.pl1 (admincalendar.php). The vulnerability is an SQL injection in admincp/admincalendar.php via the holidayinfo[recurring] parameter, allowing remote authenticated administrators with calendar access to execute arbitrary SQL commands. OpenVAS corroborat...

vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm

/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...

vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit

No description provided by source. / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 softwa...

vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery Worm

vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery Worm / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in...

vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit

Exploit for unknown platform in category web applications ======================================================= vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit ======================================================= / ----------------------------- Author = Mx Title = vBulletin 3.7.3...

waraxe-2008-SA068.txt

waraxe-2008-SA068 - Sql Injection in vBulletin 3.7.3.pl1 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-68.html Description of vulnerable software:...