DataWizard FTPXQ Default Accounts

The remote FTP server has one or more default test accounts. Description : The version of DataWizard FTPXQ that is installed on the remote host has one or more default accounts setup which can allow an attacker to read and/or write arbitrary files on the system. OpenVAS Vulnerability Test $Id:...

SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-05 = ====================================================================== Veritas Storage Foundation Arbitrary File Read Vulnerability...

[SECURITY] Fedora 9 Update: mediawiki-1.13.2-41.fc9

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Mozilla Thunderbird Version Detection (Linux)

This script retrieves Mozilla ThunderBird Version and saves it in KB. OpenVAS Vulnerability Test $Id: gbthunderbirddetectlin.nasl 8146 2017-12-15 13:40:59Z cfischer $ Mozilla Thunderbird Version Detection Linux Authors: Chandan S Copyright: Copyright c 2008 Greenbone Networks GmbH,...

Unfixed XSS vulnerability at www.greatmindsfoundation.org

Security researcher CCC, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting www.greatmindsfoundation.org, which at the time of submission ranked 9372440 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/03/2008. It ...

Mozilla Foundation Security Advisory 2008-40

Mozilla Foundation Security Advisory 2008-40 Title: Forced mouse drag Impact: Low Announced: September 23, 2008 Reporter: Paul Nickerson, Liu Die Yu Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 SeaMonkey 1.1.12 Description Mozilla developer Paul Nickerson reported a varia...

Mozilla Foundation Security Advisory 2008-45

Mozilla Foundation Security Advisory 2008-45 Title: XBM image uninitialized memory reading Impact: Low Announced: September 23, 2008 Reporter: Billy Hoffman Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.17 SeaMonkey 1.1.12 Description Security researcher Billy Hoffman discovered a bug in t...

Mozilla Foundation Security Advisory 2008-44

Mozilla Foundation Security Advisory 2008-44 Title: resource: traversal vulnerabilities Impact: Moderate Announced: September 23, 2008 Reporter: Boris Zbarsky, Georgi Guninski Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 Thunderbird 2.0.0.17 SeaMonkey 1.1.12...

Mozilla Foundation Security Advisory 2008-42

Mozilla Foundation Security Advisory 2008-42 Title: Crashes with evidence of memory corruption rv:1.9.0.2/1.8.1.17 Impact: Critical Announced: September 23, 2008 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 Thunderbi...

Apple QuickTime Version Detection for Windows

Detects the installed version of Apple QuickTime. The script logs in via smb, searches for executable of Apple QuickTime Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Analysis of the storm database vulnerability principle and the law-vulnerability and early warning-the black bar safety net

I see the storm library vulnerability principle and the law SQL injectionpopular for a long time, we're looking for vulnerability injection purpose is nothing but want to get the database stuff, such as username, password, etc., further the MSSQL database you can also take this to get permission...

[SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2008-2938: Apache Tomcat information disclosure vulnerability - Updated Severity: Important was moderate Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.1.0 to 4.1.37 Tomcat 5.5.0 to 5.5.26 Tomcat 6.0.0 to 6.0.16 The unsupported...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID a81746a1-c2c7-11d9-89f7-02061b08fc24 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: socat

The remote host is missing an update to the system as announced in the referenced advisory. VID f3017ce1-32a4-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: mysql-server

The remote host is missing an update to the system as announced in the referenced advisory. VID 29edd807-438d-11d9-8bb9-00065be4b5b6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. VID cca97f5f-7435-11db-91de-0008743bf21a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: imlib

The remote host is missing an update to the system as announced in the referenced advisory. VID 2001103a-6bbd-11d9-851d-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Storm library vulnerability principle and the law-vulnerability and early warning-the black bar safety net

SQL injectionpopular for a long time, we're looking for vulnerability injection purpose is nothing but want to get the database stuff, such as username, password, etc., further the MSSQL database you can also take this to get permission. The Access-based Foundation to say, if we don't have the...

Unfixed XSS vulnerability at www.knightfoundation.org

Security researcher FasTWORM, has submitted on 30/08/2008 a cross-site-scripting XSS vulnerability affecting www.knightfoundation.org, which at the time of submission ranked 355224 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It ...

Symantec Veritas Storage Foundation Scheduler服务绕过认证漏洞

BUGTRAQ ID: 30596 Veritas Storage Foundation是用于管理Veritas产品存储的解决方案。 Veritas Storage Foundation提供了Windows Scheduler服务（VxSchedService.exe）默认在TCP 4888端口上监听来自客户端系统的入站调度信息。由于管理控制台允许NULL NTLMSSP认证，因此网络攻击者可以绕过内嵌的认证直接连接到Scheduler服务套接字，以SYSTEM用户的权限执行任意代码。 Symantec Veritas Storage Foundation for Windows 5.1...