osCommerce Local File Include and HTML Injection Vulnerabilities

osCommerce is prone to a local file-include vulnerability and an HTML- injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mandriva Update for tcsh MDVA-2010:123 (tcsh)

Check for the Version of tcsh OpenVAS Vulnerability Test Mandriva Update for tcsh MDVA-2010:123 tcsh Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Guestbook PHP Cross Site Scripting

Exploit Title: Guestbook PHP XSS Vulnerability Date: 24.04.2010 Author: Valentin Category: webapps/0day Version: 1.2.8 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Guestbook PHP XSS...

Sun Java System Web Server Multiple Vulnerabilities

This host has Sun Java Web Server running which is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservmultvuln.nasl 6637 2017-07-10 09:58:13Z teissa $ Sun Java System Web Server Multiple Vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2010 Greenbon...

Low: Red Hat Bug Fix Advisory: cman bug fix and enhancement update

Updated cman packages that fix bugs and add enhancements are now available. The Cluster Manager cman utility provides user-level services for managing a Linux cluster. Changes in this update: fencersa fails to login with new RSA II firmware. BZ549473 fencevirsh reports vm status incorrectly...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Netpet CMS Directory Traversal Vulnerability

The host is running Netpet CMS and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodnetpetcmsdirtravvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Netpet CMS Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

Mandriva Update for slib MDVA-2010:091 (slib)

Check for the Version of slib OpenVAS Vulnerability Test Mandriva Update for slib MDVA-2010:091 slib Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...

Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Execution

$Id: dxstudioplayerexec.rb 8541 2010-02-17 20:14:40Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Researchers Discover New ACH Banker Trojan

Malware hunters at SecureWorks have intercepted a new banker Trojan being used by cyber-criminals to steal financial credentials from banks in the U.S. The Trojan, dubbed “Bugat,” targets Automated Clearing House ACH and wire transfer transactions by small- and mid-sized business in the U.S., muc...

CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities 1. Advisory Information Title: Internet Explorer Dynamic OBJECT tag and URLMON sniffing...

lexmark-config NSE Script

Retrieves configuration information from a Lexmark S300-S400 printer. The Lexmark S302 responds to the NTPRequest version probe with its configuration. The response decodes as mDNS, so the request was modified to resemble an mDNS request as close as possible. However, the port 9100/udp is listed ...

Fedora Update for stardict FEDORA-2010-0012

Check for the Version of stardict OpenVAS Vulnerability Test Fedora Update for stardict FEDORA-2010-0012 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

Total MultiMedia Features - Sony Ericsson Phones Denial of Service PoC Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a ".sest" extension, it...

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a ".sest" extension, it achieves "System" File status.This file can't be deleted, nor renamed or...

[SECURITY] Fedora 11 Update: merkaartor-0.14-2.fc11

Merkaartor is a small editor for OpenStreetMap available under the GNU General Public License and developed using the Qt toolkit. It has some unique features like anti-aliased displaying, transparent display of map features like roads and curved roads...

Outreach Project Tool 'CRM_path' Parameter Remote File Inclusion Vulnerability

The host is running Outreach Project ToolOPT and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gboutreachprojecttoolrfivuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Outreach Project Tool 'CRMpath' Parameter Remote File Inclusion Vulnerability Authors: Antu Sanadi...

Golden FTP Server 'DELE' Command Directory Traversal Vulnerability

This host is running Golden FTP Server and is prone to Directory Traversal vulnerability. OpenVAS Vulnerability Test $Id: gbgoldenftpserverdirtravvuln.nasl 6515 2017-07-04 11:54:15Z cfischer $ Golden FTP Server 'DELE' Command Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

Windows 7 Security Story May Appeal to Enterprises

Microsoft Windows 7 is on its way tomorrow, and it is bringing with it a set of security features Microsoft hopes will appeal to enterprises. The Windows 7 security story has three main chapters that have received a fair amount of attention – DirectAccess, BitLocker To Go and AppLocker. With thes...