CVE-2009-3711

creationtimestamp| type| source ---|---|--- 2009-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10053 2010-07-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16799 2018-05-29 15:50:33+00:00| seen|...

Bruce Schneier On Identification-Based Security

Security expert Bruce Schneier discusses the problems and limitations of identification-based security, from driver’s licenses to national ID cards and the REAL ID program...

SuSE 10 Security Update : kdegraphics3 (ZYPP Patch Number 6283)

This update fixes security problems while decoding JBIG2. CVE-2009-0146 / CVE-2009-0147 / CVE-2009-0165 / CVE-2009-0166 / CVE-2009-0799 / CVE-2009-0800 / CVE-2009-1179 / CVE-2009-1180 / CVE-2009-1181 / CVE-2009-1182 / CVE-2009-1183 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

Shareaza Detection (HTTP)

HTTP based detection of Shareaza. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800603";...

CVE-2008-7113

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...

Design/Logic Flaw

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...

Alternative get 94kk Forum administrator password to get the shell-vulnerability warning-the black bar safety net

Excerpt from: Qglfnt's Blog Not much to say, directly into the topic. Can to on Google to the“Powered by 94kk 2.1.0”this is 94KKBBS the latest edition, as a keyword search. Just find a forum, click on“login”in the login do not fill in the user name and password, but directly click on the“Forgot...

“Broiler”get the insider Secret's to exploit system vulnerabilities-vulnerability warning-the black bar safety net

It has been, by a large number of“broiler”is composed of the zombiesweb, all the time not a threat to all web users safe.“ Chicken”, refers to those who are the attacker full control of a computer network, it is the composition of the botnet of the main factors. Therefore, in order to eliminate t...

CVE-2009-2331

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9069...

CVE-2009-2233

The CVE-2009-2233 entry affects AWScripts.com Gallery Search Engine 1.5. An authentication bypass exists where remote attackers can set the awse_logged cookie to 1 to gain administrative access. This is documented across multiple sources (NVD, PRION, CVELIST) with a base CVSS v2 score of 7.5 (HIG...

CVE-2009-2175

Stack-based buffer overflow in the flattenIncrementally function in flatten.c in xcftools 1.0.4, as reachable from the 1 xcf2pnm and 2 xcf2png utilities, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image that causes a conversion to ...

Zen Cart 1.3.8 Remote SQL Execution Exploit

Exploit for unknown platform in category web applications =========================================== Zen Cart 1.3.8 Remote SQL Execution Exploit =========================================== !/usr/bin/python ------- Zen Cart 1.3.8 Remote SQL Execution http://www.zen-cart.com/ Zen Cart Ecommerce -...

phpBugTracker Detection (HTTP)

HTTP based detection of phpBugTracker. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100217";...

Simplistic Facebook phishing attack seeks userIDs and passwords only

From The Last Watchdog Byron Acohido There’s power in simplicity. That’s the upshot of the phishing attack now bombarding Facebook users. Many FB’ers are receiving messages titled, simply, “Hello.” The body of the text contains a brief imperative sentence: “Check areps.at” or “Check bests.at”...

CVE-2009-0840

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header...

How to identify and clean Conficker infections

As the world prepares for the complete destruction of the Internet tomorrow when the Conficker worm makes a small change in its communication protocol, a voice of reason has emerged from the wilderness. The Honeynet Project on Monday released a paper with a detailed analysis of the worm as well a...

OpenVAS Scanner Detection

Detection of OpenVAS Scanner. The script sends a connection request to the server and attempts to identify an OpenVAS Scanner service from the reply. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

CVE-2009-0880

creationtimestamp| type| source ---|---|--- 2009-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32845 2012-12-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23203 2018-05-29 15:50:33+00:00| seen|...

OS Identification : HTML

Nessus was able to identify the remote operating system by examining the HTML returned from certain HTTP requests. C Tenable, Inc. include"compat.inc"; if description scriptid35779; scriptversion"1.149"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/03/26"; scriptnameenglish:"...