No-CMS 0.6.6 Rev 1 Account Hijack / Remote Command Execution

mcryptexists = functionexists'mcryptencrypt';...

Google Chrome Multiple Vulnerabilities - 01 (Apr 2014) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

MODX Revolution 2.2.13 (and prior) Blind SQL Injection

Product: MODX Revolution Severity: Critical Versions: 2.0.0–2.2.13 Vulnerability type: SQL Injection Report date: 2014-Mar-10 Fixed date: 2014-Apr-04 Description Multiple vulnerabilities were discovered in MODX Revolution that allow users to inject and manipulate the database. This includes an...

Ruby on Rails Known Secret Session Cookie Remote Code Execution

This Metasploit module implements remote command execution on Ruby on Rails applications. Prerequisite is knowledge of the "secrettoken" Rails 2/3 or "secretkeybase" Rails 4. The values for those can be usually found in the file "RAILSROOT/config/initializers/secrettoken.rb". The module achieves...

Oracle Linux 3 : httpd (ELSA-2009-1108)

From Red Hat Security Advisory 2009:1108 : Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server...

Oracle Linux 5 / 6 : apr-util (ELSA-2010-0950)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0950 advisory. 1.3.9-3.1 - add security fix for CVE-2010-1623 659253 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 / 6 : apr (ELSA-2011-0507)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0507 advisory. 1.3.9-3.1 - add fix for CVE-2011-0419 703520 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 5 : apr-util (ELSA-2009-1107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1107 advisory. 1.2.7-7.el53.1 - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 504560 Tenable has extracted the preceding description block...

Oracle Linux 6 : tomcat6 (ELSA-2011-1780)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1780 advisory. 0:6.0.24-35 - Resolves: cve-2011-3190 - Resolves: cve-2011-2204 - Resolves: cve-2011-2526 - Resolves: cve-2011-1184 - Resolves: rhbz 748807 - tomcat6...

Oracle Linux 5 / 6 : apr (ELSA-2011-0844)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0844 advisory. 1.3.9-3.2 - add fix for aprfnmatch regression CVE-2011-1928, 706352 Tenable has extracted the preceding description block directly from the Oracle Linux...

Mozilla Firefox ESR Multiple Vulnerabilities -01 (Apr 2013) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Multiple Vulnerabilities -01 (Apr 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba SetInformationPolicy AuditEventsInfo Heap Overflow

Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Slackware Advisory SSA:2009-167-02 apr-util

The remote host is missing an update as announced via advisory SSA:2009-167-02. OpenVAS Vulnerability Test $Id: esoftslkssa200916702.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-219-03 apr-util

The remote host is missing an update as announced via advisory SSA:2009-219-03. OpenVAS Vulnerability Test $Id: esoftslkssa200921903.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2011-041-01 apr-util

The remote host is missing an update as announced via advisory SSA:2011-041-01. OpenVAS Vulnerability Test $Id: esoftslkssa201104101.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-219-02 apr

The remote host is missing an update as announced via advisory SSA:2009-219-02. OpenVAS Vulnerability Test $Id: esoftslkssa200921902.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2012-041-01 httpd

The remote host is missing an update as announced via advisory SSA:2012-041-01. OpenVAS Vulnerability Test $Id: esoftslkssa201204101.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-041-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Slackware Advisory SSA:2011-145-01 apr/apr-util

The remote host is missing an update as announced via advisory SSA:2011-145-01. OpenVAS Vulnerability Test $Id: esoftslkssa201114501.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-145-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Slackware Advisory SSA:2011-133-01 apr/apr-util

The remote host is missing an update as announced via advisory SSA:2011-133-01. OpenVAS Vulnerability Test $Id: esoftslkssa201113301.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-133-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...