90 matches found
CVE-2014-4688
PfSense
Microsoft Services MS06-066 nwwks.dll
No description provided by source. $Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2013-4688
CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...
CVE-2012-4688
CVE-2012-4688 affects i-GEN opLYNX Central software prior to version 2.01.9. The vulnerability is an authentication bypass in the Central application that can be triggered by the attacker bypassing JavaScript in the browser, enabling remote access to configuration settings and possibly other info...
CVE-2012-4688 I-GEN opLYNX Central Authentication Bypass
The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support...
Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability - Mac OS X
Mozilla Firefox is prone to cache objects history enumeration weakness vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability (Windows)
The host is installed with Mozilla Firefox and is prone to cache objects history enumeration weakness vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxcacheobjenumweaknessvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Firefox Cache Objects History Enumeration Weakness...
CVE-2010-4688
Cisco ASA 5500 series devices (pre-8.3(2)) are affected by CVE-2010-4688 due to an issue in the SIP inspection feature that can cause a device crash when processing many SIP calls. The vulnerability affects ASA firmware versions prior to 8.3(2). The root cause is described as an unspecified vulne...
Microsoft Services - 'nwapi32.dll' (MS06-066) (Metasploit)
$Id: ms06066nwapi.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Microsoft Services - 'nwwks.dll' (MS06-066) (Metasploit)
$Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
CVE-2006-4688
creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16369 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16373 2018-05-29 15:50:33+00:00| seen|...
CVE-2009-4688
Multiple XSS vulnerabilities in index.php of a PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary script/HTML via the txtkeywords and cid parameters. Affected: index.php in the PHP Shopping Cart Selling Website Script; root cause: improper handling of user-supplie...
Microsoft Services MS06-066 nwwks.dll
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...
Microsoft Services MS06-066 nwapi32.dll
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...
CVE-2009-4688
creationtimestamp| type| source ---|---|--- 2009-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34710...
GLSA-200812-07 : Mantis: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200812-07 Mantis: Multiple vulnerabilities Multiple issues have been reported in Mantis: EgiX reported that manageprojpage.php does not correctly sanitize the sort parameter before passing it to createfunction in core/utilityapi.p...
CVE-2008-4688
core/stringapi.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number...
Immunity Canvas: MANTIS113
Name| mantis113 ---|--- CVE| CVE-2008-4688 Exploit Pack| CANVAS Description| Mantis BugTracker = 1.1.3 Remote Code Execution Notes| CVE Name: CVE-2008-4688 VENDOR: Mantis Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-4688 References: 'None' CVSS: 5.0...
CVE-2008-4688
Vulnerability summary (CVE-2008-4688) : Mantis before 1.1.3 does not verify viewer privileges when building a link that includes issue data in the source anchor, allowing remote attackers to discover an issue’s title and status by tampering the issue number. This is documented across multiple sou...
CVE-2008-4688
core/stringapi.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number...