SLAD Microsoft Baseline Security Analyzer Updates run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

SLAD Netstat -natcp run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

OS Identification : SNMP sysObjectID

The remote operating system can be identified by querying its sysObjectID object using SNMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44344; scriptversion"1.28"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/04/09"; scriptnameenglish:"OS...

Microsoft IE基线标签渲染远程代码执行漏洞（MS10-002）

BUGTRAQ ID: 37895 CVE ID: CVE-2010-0245 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 如果交错的strike和center标签中包含用用于操控sub或sup等字体基线的元素的话，则在IE渲染该标签时存在释放后使用错误。在删除这个元素指针的时候，IE之后会引用已被释放的指针。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...

ZDI-10-012: Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability

ZDI-10-012: Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-012 January 21, 2010 -- CVE ID: CVE-2010-0246 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 7 Microsoft Internet...

Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that an attacker must coerce a victim to visit a malicious page. The specific flaw exists due to the...

Unfixed XSS vulnerability at buyersguide.baselinemag.com

Security researcher OMEHA, has submitted on 10/05/2007 a cross-site-scripting XSS vulnerability affecting buyersguide.baselinemag.com, which at the time of submission ranked 55359 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. It i...

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 910729 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Publisher Impact of Vulnerability: Remote Code Execution Maximum Severit...

Code injection

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 is vulnerable to a remote-denial-of-service caused by processing long DHCP packets. This vulnerability affects the device’s network operation, and the available documents do not provide exploit details or explicit reme...

[SA19756] 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service

TITLE: 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service SECUNIA ADVISORY ID: SA19756 VERIFY ADVISORY: http://secunia.com/advisories/19756/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: 3Com Baseline Switch 2848-SFP Plus...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

CVE-2005-4378

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter...

CVE-2005-4378

CVE-2005-4378 is a SQL injection vulnerability in Page.asp of Baseline CMS 1.95 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter. The reported CVSS v2 base score is 7.5 (HIGH) with network access, low attack complexity, and no authentica...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

CVE-2005-4378

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter...

CVE-2005-4377

CVE-2005-4377 describes a cross-site scripting (XSS) vulnerability in the Page.asp component of Baseline CMS (version 1.95 and earlier). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the PageID or SiteNodeID parameters. The available records indicate an XSS ...

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15961/info Baseline CMS is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacke...