1319 matches found
Amaya 11.1 XHTML Parser Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================== Amaya 11.1 XHTML Parser Remote Buffer Overflow PoC ================================================== =cicatriz ==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer...
openSUSE 10 Security Update : NetworkManager-kde (NetworkManager-kde-6031)
The knetworkmanager configuration was too permissive and allowed any user to read secrets CVE-2009-0365. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update NetworkManager-kde-6031. The text...
ESET Remote Administrator < 3.0.105 Additional Report Settings XSS
ESET Remote Administrator is installed on the remote system. The installed version is less than version 3.0.105, and such versions are reportedly affected by an HTML injection vulnerability. An attacker can exploit this vulnerability to cause arbitrary HTML and script code to be executed with in...
CVE-2009-0405
creationtimestamp| type| source ---|---|--- 2009-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7901...
openSUSE 10 Security Update : acroread (acroread-5749)
The acroread package was update to fix several security vulnerabilities in the JavaScript engine. CVE-2008-2992, CVE-2008-2549, CVE-2008-4812, CVE-2008-4813, CVE-2008-4817, CVE-2008-4816, CVE-2008-4814, CVE-2008-4815 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
logzpodcast-sql.txt
Logz podcast CMS version 1.3.1 Remote sql inj download: http://sourceforge.net/project/showfiles.php?groupid=107225&packageid=178479&releaseid=635701 ---------------------------------------------------------- Discovered By: ZoRLu Date: 31.10.2008 Home: www.z0rlu.blogspot.com contact:...
MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695) (uncredentialed check)
The remote host has HIS Host Integration Server installed. The remote version of this product is affected by a code execution vulnerability in its RPC interface. An attacker could exploit this flaw to execute arbitrary code on the remote host by making rogue RPC queries. C Tenable Network Securit...
CVE-2008-7001
creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6405...
AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution
The remote web server is running a version of awstatstotals.php which does not properly sanitize its 'sort' argument. An attacker can run arbitrary commands on the remote host within the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2008-7091
creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6172 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6173...
Mac OS X Multiple Vulnerabilities (Security Update 2008-004)
The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-004 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...
eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...
Fedora 8 : nagios-plugins-1.4.11-2.fc8 (2008-3061)
Upstream released a new version. This also fixes CVE-2007-5198 315101. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
MikroTik RouterOS with Blank Password (telnet check)
The remote host is running MikroTik RouterOS without a password for its 'admin' account. Anyone can connect to it and gain administrative access to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid30213;...
Fedora 7 : clamav-0.92-6.fc7 (2008-0170)
Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...
Flash Player < 7.0.73.0 / 9.0.115.0 Multiple Vulnerabilities (APSB07-20)
According to its version number, the instance of Flash Player on the remote Windows host is affected by multiple issues, including several which could allow for arbitrary code execution by means of a malicious SWF file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Hosting Controller - Multiple Security Bugs (Extremely Critical)
Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...
AIX 5.2 TL 10 : printers.rte (U814071)
The remote host is missing AIX PTF U814071, which is related to the security of the package printers.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U814071. The text itself is copyright C...
Slackware 12.0 : poppler (SSA:2007-222-02)
A new poppler package is available for Slackware 12.0 to fix an integer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-222-02. The text itself is copyright C Slackware Linux...
MS07-041: Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)
The remote host has a version of IIS that is vulnerable to a remote flaw that could allow an attacker to take the control of the remote web server and execute arbitrary commands on the remote host with the SYSTEM privileges. Tenable Network Security, Inc. include"compat.inc"; if description...