CVE-2010-3912

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors...

Analysis of PHP programs in the directory traversal vulnerability-vulnerability warning-the black bar safety net

| The depths of winter and the eve of Directory traversalvulnerabilityboth at home and abroad have many different names,for example, can also be called information leakagevulnerability,non-authorized files contains avulnerability. The name though,but they have a common Genesis,is in the program n...

Ubuntu Update for imagemagick vulnerability USN-1028-1

Ubuntu Update for Linux kernel vulnerabilities USN-1028-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10281.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for imagemagick vulnerability USN-1028-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

Exim alternate configuration privilege escalation vulnerability

Overview A vulnerability in the way that the Exim mail server handles configuration files may allow a local attacker to gain escalated privileges on an affected system. Description Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to t...

[SECURITY] Fedora 12 Update: openldap-2.4.19-6.fc12

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Maian Gallery v2 Local File Download Vulnerability

Exploit for php platform in category web applications ================================================== Maian Gallery v2 Local File Download Vulnerability ================================================== !/usr/bin/python This vulnerability uses filegetcontents so we have some limitations, we...

Maian Gallery 2 - Local File Download

!/usr/bin/python This vulnerability uses filegetcontents so we have some limitations, we cant execute PHP and we cant read files that the web server will interpret such as PHP, conf etc tested on: Ubuntu Linux 2.6.32 with php v5.3.2 registerglobals = Off PRIVATE 0DAY - code by mrme Vulnerability...

Proventia Network Mail Security System Insecure Direct Object Reference

Security Advisory: MVSA-10-008 / CVE-2010-0154 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: Insecure Direct Object Reference Risk: Medium Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-008...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

CVE-2010-2668

Unspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2 allows remote attackers to bypass authentication and read or write configuration files via unknown vectors...

Authentication flaw

Unspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2 allows remote attackers to bypass authentication and read or write configuration files via unknown vectors...

Fedora 11 : bugzilla-3.2.6-2.fc11 (2010-1458)

This version of Bugzilla fixes security issues that were found in previous versions of the software where private bugs could be made public and configuration files were exposed to the world. CVE Numbers: CVE-2009-3989 and CVE-2009-3387 See upstream security advisory for additional details:...

Read /etc/cups/cupsd.conf and /etc/cups/client.conf

Read /etc/cups/cupsd.conf and /etc/cups/client.conf over an SSH Connection. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QuickTalk v1.2 (Source code disclosure) Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================================ QuickTalk v1.2 Source code disclosure Multiple Vulnerabilities ================================================================...

TS Special Edition 7.0 Disclosure

TS Special Edition 3.2 javascript:TSQuickRate'torrent1', 'CHAGEYOURIDHERE'; 4 Apply changes and vote the torrent every ti...

TS Special Edition 7.0 - Multiple Vulnerabilities

TS Special Edition 3.2 javascript:TSQuickRate'torrent1', 'CHAGEYOURIDHERE'; 4 Apply changes and vote the torrent every time you want...

TS Special Edition 7.0 - Multiple Vulnerabilities

TS Special Edition 7.0 - Multiple Vulnerabilities TS Special Edition 3.2 javascript:TSQuickRate'torrent1', 'CHAGEYOURIDHERE'; 4 Apply changes and vote the torrent every time you want...

TS Special Edition <= v.7.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities Dork: "Powered by TS Special...

Crimson Editor 3.70 SEH Overwrite

!/usr/bin/python Exploit Title : Crimson Editor r3.70 SEH Overwrite Vulnerability PoC exploit Date : 21/03/2010 Author : mrme Bug found by : sharpe Version : 3.70 Release Tested on : XP SP3 En Reference : http://www.exploit-db.com/exploits/11803 Greetz to : Corelan Security Team & sharpe...