5900 matches found
HP OpenView NNM ovwebsnmpsrv.exe Invalid Option Buffer Overflow (CVE-2010-1960)
The HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerabili...
Apache Struts2 ParametersInterceptor Remote Command Execution (CVE-2010-1870)
Apache Struts2 is a free framework for building Java web-based applications. A command execution vulnerability has been reported in the web application framework Apache Struts2. The vulnerability is due to insufficient input validation in the ParametersInterceptor component when parsing incoming...
Nagios XI Multiple Cross Site Request Forgery Vulnerabilities
Nagios XI is prone to multiple cross-site request-forgery vulnerabilities because the application fails to properly validate HTTP requests. Successful exploit requires that the 'nagiosadmin' be logged into the web interface. Attackers can exploit these issues to gain unauthorized access to the...
tomcat5 security update
CentOS Errata and Security Advisory CESA-2010:0580 Updated tomcat5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS ba...
CA XOsoft Multiple Products xosoapapi.asmx Buffer Overflow (CVE-2010-1223)
CA ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including backup and restore, data migration, and threat management. A buffer overflow vulnerability has been...
Important: Red Hat Security Advisory: jbossweb security update
An updated jbossweb package that fixes two security issues is now available for JBoss Enterprise Application Platform 4.2 and 4.3 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...
Important: Red Hat Security Advisory: tomcat5 security update
Updated tomcat5 packages that fix three security issues are now available for Red Hat Application Server v2. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
Important: Red Hat Security Advisory: tomcat5 security update
Updated tomcat5 packages that fix one security issue are now available for Red Hat Developer Suite 3. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: tomcat5 security update
Updated tomcat5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
Apache Byte-Range Filter Denial of Service (CVE-2005-2728)
Apache HTTP Server is the most widely deployed web servers on the Internet. Apache HTTP server is capable of running on Microsoft Windows and wide variety of Unix-like platforms. The server may be run as a standalone web server, a proxy, or a reverse proxy. There exists a denial of service...
Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
This host is running Moodle and is prone to Cross-Site Scripting and Cross Site Request Forgery Vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlexssncsrfvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities Authors: Madhuri...
Moodle XSS and CSRF Vulnerabilities
Moodle is prone to cross-site ccripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Outlook Web Access 2007 - Cross-Site Request Forgery
Outlook Web Access 2007 - Cross-Site Request Forgery Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporat...
Specialist Bed and Breakfast Website SQL Injection Exploit
Exploit for php platform in category web applications ========================================================== Specialist Bed and Breakfast Website SQL Injection Exploit ========================================================== !/usr/bin/python Specialist Bed and Breakfast Website SQL Injectio...
Cisco CSS Content Services Switch and ACE Application Control Engine HTTP SSL Header Spoofing Vulnerability
Cisco CSS Content Services Switch CSS, SSL Services Module SSLM, and ACE Application Control Engine ACE contain a vulnerability that could allow an authenticated, remote attacker to insert spoofed SSL headers into HTTP requests. The vulnerability exists because the affected products weakly enforc...
ShopCartDx 4.30 - products.php Blind SQL Injection
ShopCartDx 4.30 - products.php Blind SQL Injection !/usr/bin/perl 0-Day ShopCartDx /trafficdemos/shopcartdx1/ my $MemberID = shift or my $Method = HTTP::Request-newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub...
webERP 3.11.4 - Multiple Vulnerabilities
webERP 3.11.4 - Multiple Vulnerabilities Title: webERP Multiple Vulnerabilities Author: ADEO Security Published: 30/06/2010 Version: 3.11.4 Possible all versions Vendor: http://www.weberp.org Description: "webERP is a complete web based accounting/ERP system that requires only a web-browser and p...
Snare Agent web interface cross-site request forgery vulnerabilities
Overview The Snare Agent web interface is susceptible to cross-site request forgery attacks. Description The web interface allows the administrator to manage several agent settings, including changing the listening port and password. These HTTP requests do not perform proper validity checks and a...
CVE-2010-2465
The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via...
Improper access control
The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via...