4988 matches found
ZENworks Remote Management Agent Detection
The remote host is running ZENworks Remote Management Agent. This program allows a system to be managed remotely by an administrator. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid36088; scriptversion"1.10";...
phpMyAdmin Code Injection and XSS Vulnerability
phpMyAdmin is prone to a remote PHP code-injection vulnerability and to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
Pixie CMS SQL Injection and Cross Site Scripting Vulnerabilities
Pixie CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modif...
Gretech GOM Encoder 1.0.0.11 (Subtitle File) Buffer Overflow PoC
No description provided by source. exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: http://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close...
Yap Blog 'index.php' Remote File Include Vulnerability
Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. Versions prior to Yap Blog 1.1.1 are...
Bugs Online <= 2.14 SQLi Vulnerability - Active Check
Bugs Online is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
WEBJump! Multiple SQLi Vulnerabilities (Mar 2009) - Active Check
WEBJump! is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Yap Blog < 1.1.1 RFI Vulnerability - Active Check
Yap Blog is prone to a remote file inclusion RFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Dagger RFI Vulnerability (Mar 2009) - Active Check
Dagger is prone to a remote file include RFI vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC)
exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: https://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close milw0rm.com 2009-03-16...
Woltlab Burning Board <= 3.0.5 Multiple Input Validation Vulnerabilities - Active Check
Woltlab Burning Board is prone to multiple input-validation vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TurnkeyForms Local Classifieds Authentication Bypass Vulnerability (Mar 2009) - Active Check
TurnkeyForms Local Classifieds is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
GhostScripter Amazon Shop Multiple Vulnerabilities (Mar 2009) - Active Check
Amazon Shop is prone to multiple vulnerabilities, including a cross-site scripting issue, a directory-traversal issue, and multiple remote file-include issues, because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be...
ClearBudget <= 0.6.1 Unauthorized Access Vulnerability - Active Check
ClearBudget is prone to an unauthorized access vulnerability because it fails to properly restrict access to certain directories. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit
No description provided by source. !usr/bin/perl -w Yaws before 1.80 allows remote attackers to cause a denial of service memory consumption and crash via a request with a large number of headers. Refer: http://yaws.hyber.org/ http://www.securityfocus.com/bid/33834/discuss...
Mozilla Firefox 2.0.x - Nested 'window.print()' Denial of Service
source: https://www.securityfocus.com/bid/33969/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Firefox 2.0.0.20 is vulnerable; other versions may also be...
Novaboard 1.0 - HTML Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/33968/info NovaBoard is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the issues to execute arbitrary script code in the browser of an...
A4Desk Event Calendar SQLi Vulnerability (Mar 2009) - Active Check
A4Desk Event Calendar is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Novell eDirectory iMonitor - 'Accept-Language' Request Buffer Overflow (PoC)
!usr/bin/perl -w Novell eDirectory iMonitor 'Accept-Language' Request Buffer Overflow Vulnerability Refer: https://www.securityfocus.com/bid/33928/discuss To run this exploit on MS Windows replace "!usr/bin/perl -w" with "!Installationpathforperl -w" say !C:/Program Files/Perl/bin/perl -w $$$$$Th...
Free Download Manager torrent file parsing buffer overflow
Added: 02/17/2009 CVE: CVE-2009-0184 BID: 33555 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability allows command execution when a user opens a torrent file containing a long file name. Resolution Upgrade to version...