CVE-2013-0340

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XMLSetEntityDeclHandler function, which allows remote attackers to cause a denial of service resource consumption, send HTTP requests to intranet servers, or read arbitrary files via a...

CentOS Update for nss CESA-2013:1829 centos6

Check for the Version of nss OpenVAS Vulnerability Test CentOS Update for nss CESA-2013:1829 centos6 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Microsoft Office Information Disclosure Vulnerability (2909976)

This host is missing an important security update according to Microsoft Bulletin MS13-104. OpenVAS Vulnerability Test $Id: secpodms13-104.nasl 6125 2017-05-15 09:03:42Z teissa $ Microsoft Office Information Disclosure Vulnerability 2909976 Authors: Antu Sanadi Copyright: Copyright C 2013 SecPod,...

Hacker stole $100,000 from Users of California based ISP using SQL Injection

In 2013 we have seen a dramatic increase in the number of hack attacks attempted against banks, credit unions and utility companies using various techniques including DDoS attack, SQL injection, DNS Hijacking and Zero-Day Flaws. SQL Injection is one of the most common security vulnerabilities on...

Hacker stole $100,000 from Users of California based ISP using SQL Injection

In 2013 we have seen a dramatic increase in the number of hack attacks attempted against banks, credit unions and utility companies using various techniques including DDoS attack, SQL injection, DNS Hijacking and Zero-Day Flaws. SQL Injection is one of the most common security vulnerabilities on...

CVE-2013-1343

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k...

[IronWASP v0.9.6.5] Open Source Advanced Web Security Testing Platform

IronWASP Iron Web application Advanced Security testing Platform is an open source system for web application vulnerability testing. It is designed to be customizable to the extent where users can create their own custom security scanners using it. Though an advanced user with Python/Ruby scripti...

Oracle Linux 3 / 4 : freetype (ELSA-2007-0150)

From Red Hat Security Advisory 2007:0150 : Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable...

Comodo Internet Security Denial of Service Vulnerability-03

The host is installed with Comodo Internet Security and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbcomododosvuln03win.nasl 6086 2017-05-09 09:03:30Z teissa $ Comodo Internet Security Denial of Service Vulnerability-03 Authors: Arun Kallavi Copyright: Copyright ...

et-chat - Privilege Escalation Arbitrary File Upload

et-chat - Privilege Escalation Arbitrary File Upload source: https://www.securityfocus.com/bid/60660/info et-chat is prone to a privilege-escalation vulnerability and an arbitrary shell-upload vulnerability. An attacker can exploit these issues to gain elevated privileges within the application a...

Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

Wordpress MailUp Plugin Multiple Vulnerabilities

This host is installed with Wordpress MailUp Plugin and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwordpressmailupmultvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Wordpress MailUp Plugin Multiple Vulnerabilities Authors: Thanga Prakash S Copyright: Copyright c 2013...

CVE-2013-1848

fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application...

VicBlog - Multiple SQL Injections

VicBlog - Multiple SQL Injections source: https://www.securityfocus.com/bid/56307/info VicBlog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to...

SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability

This host is running SonicWall Viewpoint and is prone to sql injection vulnerability. OpenVAS Vulnerability Test $Id: gbsonicwallviewpointscheduleidsqlinjvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability Authors: Rachana Shetty...

GLSA-201209-02 : libTIFF: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-02 libTIFF: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libTIFF. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a special...

tekno.Portal 0.1b - link.php SQL Injection

tekno.Portal 0.1b - link.php SQL Injection source: https://www.securityfocus.com/bid/54786/info tekno.Portal is prone to an SQL-injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

FreeBSD : libjpeg-turbo -- heap-based buffer overflow (a460035e-d111-11e1-aff7-001fd056c417)

The Changelog for version 1.2.1 says: Fixed a regression caused by 1.2.06 in which decompressing corrupt JPEG images specifically, images in which the component count was erroneously set to a large value would cause libjpeg-turbo to segfault. A Heap-based buffer overflow was found in the way...

Elite Bulletin Board - Multiple SQL Injections

Elite Bulletin Board - Multiple SQL Injections source: https://www.securityfocus.com/bid/54452/info Elite Bulletin Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Useresponse 1.0.2 - Privilege Escalation / Remote Code Execution

!/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles @bclose and mrme @netninja exploit by...