Mandrake Security Advisory MDVSA-2009:162 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:162. OpenVAS Vulnerability Test $Id: mdksa2009162.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:162 java-1.6.0-openjdk Authors: Thomas Reinke Copyright:...

tomcat XML parser information disclosure

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the 1 web.xml, 2 context.xml, or 3 tld files of arbitrary web applications via a crafted...

F-Secure Product(s) Integer Overflow Vulnerability (Linux)

This host is installed with F-Secure Products and is prone to Integer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfsecureprdtsintoverflowvulnlin.nasl 6516 2017-07-04 12:20:47Z cfischer $ F-Secure Products Integer Overflow Vulnerability Linux Authors: Sharath S Copyright: Copyright c...

Impropper sanitisation of attachment filenames allows header injection

An attacker can craft a specific attachment filename, or rename the file once it has been uploaded to introduce arbitrary headers into the response stream...

CVE-2009-0741

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

Sql injection

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

CVE-2009-0741

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

CVE-2009-0741

An active CVE entry (CVE-2009-0741) describes an SQL injection vulnerability in Craft Silicon Banking@Home 2.1 and earlier. The affected component is Login.asp, and the vulnerability is exploitable via the LoginName parameter to allow remote attackers to execute arbitrary SQL commands. This is th...

Craft Silicon Banking@Home SQL Injection

Craft Silicon Banking@Home SQL Injection Author: Francesco Bianchino Email: f.bianchino at gmail.com Title: Craft Silicon Banking@Home SQL Injection Product: Banking@Home - Net Banking Versions Vulnerable: 2.1 and below Vendor: Craft Silicon www.craftsilicon.com Summary Banking@Home is an home...

PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ==================================================================== PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability ==================================================================== ------- DESCRIPTION: PHP-Ring...

phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln

No description provided by source. ...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy &...

Galatolo Web Manager 1.3a - Insecure Cookie Handling

...:::::Galatolo Web Manager 1.3a Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my...

Maian Weblog 4.0 - Insecure Cookie Handling

Maian Weblog 4.0 - Insecure Cookie Handling -+================================================================================+- -+ Maian Weblog = v4.0 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By:...

KnowledgeQuest 2.5 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uz...

CVE-2007-6261

Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...

SuSE Security Update: Kernel Update for SUSE Linux 10.1 (kernel-4193)

This kernel update brings the kernel to the one shipped with SLES 10 Service Pack 1 and also fixes the following security problems: - CVE-2007-2242: The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network...

WengoPhone 2.x SIP Phone Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= WengoPhone 2.x SIP Phone Remote Denial of Service Exploit ========================================================= /main.cpp/ include include using namespace std; ifdef WIN32 include prag...

CVE-2007-3763

The IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted 1 LAGRQ or 2 LAGRP...

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...

Cisco IOS VTP VLAN Buffer Overflow Vulnerability

Cisco IOS contains a vulnerability that could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability exists due to improper input validation by the VTP feature of Cisco IOS. An authenticated, remote attacker could exploit this vulnerability by submitting a malicious...