CVE-2011-3522

CVE-2011-3522 concerns an unspecified vulnerability in SysFW 8.0 on Oracle SPARC-based servers (SPARC T3, Netra SPARC T3, Sun Fire, Sun Blade) that allows local users to affect confidentiality, related to the Integrated Lights Out Manager (ILOM) CLI. The available connected sources confirm the af...

Cisco Security Advisory: Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities Advisory ID: cisco-sa-20110928-zbfw Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT...

[SECURITY] Fedora 16 Update: rubygem-railties-3.0.10-1.fc16

Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manager rails command line interface; provides Rails generators core;...

OpenSLP 1.2.1 / < 1647 trunk - Denial of Service

!/usr/bin/python Title: OpenSLP DoS Author: Nicolas Gregoire @AgarriFR CVE: 2010-3609 Software download: http://www.openslp.org/download.html Version: v1.2.1 and trunk before revision 1647 Tested on: Linux Ubuntu 10.04, VMware ESX 4.0 Notes: It affects some others SLP softwares, like mSLP. More...

Fedora Update for mono FEDORA-2011-3393

Check for the Version of mono OpenVAS Vulnerability Test Fedora Update for mono FEDORA-2011-3393 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 14 Update: mono-2.6.7-4.fc14

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

Seccubus 2.0.alpha1 released, Download Now !

So what is the difference between Seccubus V2 and Seccubus V2 ? Before you try something new you want to know if it is going to be worth it. This article should give you an idea of why we spend quite a lot of time and energy in rebuilding Seccubus V2 from scratch. I clearly recall the conversatio...

Re: hidden admin user on every HP MSA2000 G3

On Mon, 13 Dec 2010 [email protected] wrote: i just found out that there is a hidden user on every HP MSA2000 G3 SAN out there: username: admin password: !admin Confirmed on P2000 G3 fw L100R013. Please, HP, is it really necessary to give us so many different reasons to hate you?! this use...

Cisco IOS Software Secure Copy Privilege Escalation Vulnerability - Cisco Systems

The server side of the Secure Copy SCP implementation in Cisco IOS software contains a vulnerability that could allow authenticated users with an attached command-line interface CLI view to transfer files to and from a Cisco IOS device that is configured to be an SCP server, regardless of what...

Fedora Update for mono FEDORA-2010-10332

Check for the Version of mono OpenVAS Vulnerability Test Fedora Update for mono FEDORA-2010-10332 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 12 Update: mono-2.4.3.1-2.fc12

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

[SECURITY] Fedora 13 Update: mono-2.6.4-1.fc13

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

IPB 3.0.1 SQL Injection

Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More information:\n"; echo "http://www.google.com/search?hl=en&q=php+cl...

Invision Power Board 3.0.1 - SQL Injection

Invision Power Board 3.0.1 - SQL Injection Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More information:\n"; echo "http://www.google.com/search?hl...

Invision Power Board 3.0.1 sql injection exploit

No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB 3.0.1 sql injection exploit // Version 1.0 // written by Cryptovirus //...

Invision Power Board 3.0.1 - SQL Injection

Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More information:\n"; echo "http://www.google.com/search?hl=en&q=php+cli+windows\n"; e...

IPB 3.0.1 sql injection exploit

Exploit for php platform in category web applications =============================== IPB 3.0.1 sql injection exploit =============================== Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More inform...

McAfee Email Gateway 6.7.2 Hotfix 2更新修复多个安全漏洞

BUGTRAQ ID: 39242 McAfee Email Gateway之前名为IronMail，是企业级的硬件邮件网关和管理平台。 McAfee Email Gateway的6.7.2 Hotfix 2之前版本中的多个漏洞允许本地用户导致拒绝服务、读取敏感信息、获得权限提升，或允许远程攻击者执行跨站脚本攻击。 1 处理CLI命令时的错误可能耗尽可用的系统资源。 2 由于没有正确地过滤提交给admin/queuedMessage.do页面的queueMsgType和QtnType参数，远程攻击者可以通过提交恶意请求执行跨站脚本攻击。 3...

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

Advisory Name: Local Privilege Escalation in McAfee Email Gateway formerly IronMail Vulnerability Class: Local Privilege Escalation Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local Severit...

CVE-2009-2936

The Command Line Interface aka Server CLI or administration interface in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to 1 execute arbitrary code via a vcl.inline...