Comptel InstantLink Cross Site Scripting

-------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://www.comptel.com/ProvisioningActivation/ Version: All CVE : NA --------------------------------------------------...

Ubuntu USN-800-1 (irssi)

The remote host is missing an update to irssi announced via advisory USN-800-1. OpenVAS Vulnerability Test $Id: ubuntu8001.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8001.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-800-1 irssi Authors: Thomas...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : irssi vulnerability (USN-800-1)

It was discovered that irssi did not properly check the length of strings when processing WALLOPS messages. If a user connected to an IRC network where an attacker had IRC operator privileges, a remote attacker could cause a denial of service. Note that Tenable Network Security has extracted the...

HP-UX Update for on HP9000 Series 700/800 HPSBUX00264

Check for the Version of on HP9000 Series 700/800 OpenVAS Vulnerability Test HP-UX Update for on HP9000 Series 700/800 HPSBUX00264 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

HP-UX Update for rpcbind Software HPSBUX00169

Check for the Version of rpcbind Software OpenVAS Vulnerability Test HP-UX Update for rpcbind Software HPSBUX00169 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

HP-UX Update for rpcbind Software HPSBUX00169

Check for the Version of rpcbind Software OpenVAS Vulnerability Test HP-UX Update for rpcbind Software HPSBUX00169 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

HP-UX Update for Filesystem Deadlock HPSBUX00178

Check for the Version of Filesystem Deadlock OpenVAS Vulnerability Test HP-UX Update for Filesystem Deadlock HPSBUX00178 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

HP-UX Update for sort HPSBUX00237

Check for the Version of sort OpenVAS Vulnerability Test HP-UX Update for sort HPSBUX00237 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Debian: Security Advisory (DSA-800-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6054

Cross-site scripting XSS vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the /screens URI, related to the url...

Cross site scripting

Cross-site scripting XSS vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the /screens URI, related to the url...

CVE-2007-6054

Cross-site scripting XSS vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the /screens URI, related to the url...

CVE-2007-6054

The CVE-2007-6054 entry describes an XSS vulnerability in the login page of Aruba 800 Mobility Controller (versions 2.5.4.18 and earlier; 2.4.8.6-FIPS and earlier). The issue occurs in the management interface via PATH_INFO to the /screens URI, related to the url variable, allowing remote attacke...

PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page

Date Found: 17th July 2007 Vendor informed: 23rd July 2007 Confirmed by vendor: 13th September 2007 Description: Aruba 800 is vulnerable to a persistent XSS on the administrator login screen. An unauthenticated user can re-write the hidden parameter 'url' by requesting a link under the /screens/...

ProCheckUp Security Advisory 2007.26

Date Found: 17th July 2007 Vendor informed: 23rd July 2007 Confirmed by vendor: 13th September 2007 Description: Aruba 800 is vulnerable to a persistent XSS on the administrator login screen. An unauthenticated user can re-write the hidden parameter 'url' by requesting a link under the /screens/...

Aruba MC-800 Mobility Controller - Screens Directory HTML Injection

Aruba MC-800 Mobility Controller - Screens Directory HTML Injection source: https://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow...

Aruba MC-800 Mobility Controller - Screens Directory HTML Injection

source: https://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of the...

Cisco Router Web Setup (CRWS) contains an insecure default IOS configuration

Overview A vulnerability in the Cisco Router Web Setup CRWS web configuration tool on some Cisco 800 and SOHO series routers may allow remote execution of system-level commands with no authentication. Description Cisco Router Web Setup Tool The Cisco Router Web Setup tool, or CRWS, provides a GUI...

CVE-2005-3140

Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map passwd.nis as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes...

CVE-2005-3140

Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map passwd.nis as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes...