Sun Java Web Start Remote Command Execution Vulnerability (Windows)

This host is running Sun Java Web Start and is prone to Remote Command Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawscodeexecvulnwin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java Web Start Remote Command Execution Vulnerability Windows Authors: Veerendra GG Copyright:...

Sun Java Web Start Remote Command Execution Vulnerability - Windows

Sun Java Web Start is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft iExplorer ' ' Address Bar URI Spoofing Vulnerability

This host is installed with Microsoft Internet Explorer and is prone to an URI spoofing vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiexplorerurispoofvuln900170.nasl 8957 2018-02-26 14:41:13Z asteins $ Description: Microsoft iExplorer '' Address Bar URI Spoofing Vulnerability Authors:...

Sun Java Web Start Remote Command Execution Vulnerability (Linux)

This host is running Sun Java Web Start and is prone to Remote Command Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawscodeexecvulnlin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java Web Start Remote Command Execution Vulnerability Linux Authors: Veerendra GG Copyright:...

Sun Java Web Start Remote Command Execution Vulnerability - Linux

Sun Java Web Start is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Absolute FAQ Manager 6.0 Insecure Cookie Handling Vulnerability

No description provided by source. Discovered by : Hakxer Script : Absolute FAQ Manager http://www.xigla.com/absolutefmnet/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie="xlaAFMDEMOadmin=userid=1&lvl=1&s="; Exploit Go To...

CVE-2008-4800

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

Null pointer dereference

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

CVE-2008-4800

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

Mircosoft Windows Token Kidnapping本地提权漏洞

CNCAN ID：CNCAN-2008101007 Microsoft Windows是一款流行的操作系统。 漏洞是由于在NetworkService或LocalService上下文运行的代码，可以访问同样是在 NetworkService或LocalService上下文下运行的进程，部分进程允许提升特权到LocalSystem。 对于IIS，默认安装是不受影响的，以Full Trust运行的ASP.NET代码受此漏洞影响，如果权限低于Full Trust，也不受此漏洞影响。同样旧Asp代码不受此漏洞影响，只有ASP.NET才受影响。 针对SQL...

JVN#30732239: Apache Tomcat allows access from a non-permitted IP address

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may allow a user from a non-permitted IP address to gain access to a protected context. Impact Impact varies depending on t...

Ftbbs 6. X injection 0day exp-vulnerability warning-the black bar safety net

Article author: the cloud EagleJ. L. S. T Information source: security leaves the technical groupJ. Leaves Security Team （http://www.00day.cn to See 1 0 The Big Brother of the message scared me, put something out, don't know a wooden man to, wood technology, only grasping the point of the broiler...

Microsoft Rich Textbox ActiveX control SaveFile vulnerability

Added: 10/07/2008 CVE: CVE-2008-0237 BID: 27201 OSVDB: 40234 Background Microsoft Rich Textbox is an ActiveX control which comes with Visual Basic and allows creation of formatted text in RTF files. It is located in the Richtx32.ocx file. Problem The SaveFile method in the Rich Textbox ActiveX...

vxFtpSrv 2.0.3 - CWD Remote Buffer Overflow (PoC)

vxFtpSrv 2.0.3 - CWD Remote Buffer Overflow PoC !/usr/bin/perl vxFtpSrv 2.0.3 CWD command Overflow PoC by Julien Bedard www.kosseclab.com [email protected] Tested on MS Windows Mobile 6.0 maybe other versions are vulnerable vxftpsrv is the most common ftp server for mobile devices: wm, ppc etc. ...

vxFtpSrv 2.0.3 - 'CWD' Remote Buffer Overflow (PoC)

!/usr/bin/perl vxFtpSrv 2.0.3 CWD command Overflow PoC by Julien Bedard www.kosseclab.com [email protected] Tested on MS Windows Mobile 6.0 maybe other versions are vulnerable vxftpsrv is the most common ftp server for mobile devices: wm, ppc etc. it suffer of an overflow when it recieve too lon...

Microsoft Windows Mobile 6.0 - Device Long Name Remote Reboot (Denial of Service)

Microsoft Windows Mobile 6.0 - Device Long Name Remote Reboot Denial of Service !/usr/bin/perl ----------WM6 remote overflow reboot PoC---------- Simple exploit for remote rebooting a windows mobile device Maybe we can use it for doing command execution, I've not test it since the device is...

Symantec Vertias NetBackup Java管理GUI远程特权提升漏洞

BUGTRAQ ID: 31221 CNCAN ID：CNCAN-2008092514 Symantec Veritas NetBackup是一款数据备份应用解决方案。 Symantec Veritas NetBackup包含的Java管理GUIjnbSA存在漏洞，远程授权非特权攻击者可以利用漏洞以应用程序权限执行任意命令。 恶意用户需要通过验证并登录到GUI来利用此漏洞。 Symantec Veritas NetBackup Server 6.5 Symantec Veritas NetBackup Server 6.0 Symantec Veritas NetBackup Serve...

Microsoft Windows Media Encoder (XP SP2) - wmex.dll ActiveX Buffer Overflow (MS08-053)

Microsoft Windows Media Encoder XP SP2 - wmex.dll ActiveX Buffer Overflow MS08-053 ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow...

Microsoft Windows Media Encoder (XP SP2) - 'wmex.dll' ActiveX Buffer Overflow (MS08-053)

============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploit for WinXP SP2 PRO English / IE6.0 SP2 Foun...

Design/Logic Flaw

MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' b single-quote single-quote token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service daemon crash by using this token in a SQL statement...