SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6609)

The Mozilla Firefox browser was updated to version 3.5.4 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft....

giop-info NSE Script

Queries a CORBA naming server for a list of objects. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE REASON 1050/tcp open java-or-OTGfileshare syn-ack | giop-info: | Object: Hello | Context: Test | Object: GoodBye Requires giop shortport stdnse local giop = require "giop" local...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:294)

Security issues were identified and fixed in firefox 3.5.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...

LDAP Group Enumeration

By using the search base gathered by plugin ID 25701, Nessus was able to enumerate the list of groups in the remote LDAP directory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45477; scriptversion"$Revision: 1.4 $"; scriptcvsdate"$Date: 2017/01/26 18:40:45 $";...

IBM WebSphere Application Server 6.0 < 6.0.2.39 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0 before Fix Pack 39 for 6.0.2 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - A cross-site request forgery vulnerability exists due to insufficient validation of user-supplied input by the...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)

Security issues were identified and fixed in firefox 3.0.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...

SAP Business One License Manager 2005 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'SAP...

PHP and ASP upload vulnerability exploit-vulnerability warning-the black bar safety net

1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...

IBM WebSphere Application Server < 7.0.0.7 Multiple Vulnerabilities

Binary data 5235.prm...

IBM WebSphere Application Server 7.0 < Fix Pack 7

IBM WebSphere Application Server 7.0 before Fix Pack 7 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - A cross-site request forgery vulnerability exists due to insufficient validation of user-supplied input by the administrative console...

The Debate Over Naming Botnets

The security industry lacks a uniform way to title botnets, and the result is sometimes a long list of names for the same botnet that are used by different antivirus vendors and that can be confusing to customers. As it stands now, the infamous Conficker is also known as Downup, Downadup and Kido...

Mozilla Firefox < 3.0.15 / 3.5.4 Multiple Vulnerabilities

Binary data 801352.prm...

Firefox 3.5.3 local download manager temp file creation

No description provided by source. / getunique.c AKA Mozilla Firefox 3.5.3 Local Download Manager Exploit Jeremy Brown [email protected] // jbrownsec.blogspot.com // krakowlabs.com 10.28.2009 When downloading files through Firefox and choosing the "Open with" option, Firefox will create a...

Local downloaded file tampering — Mozilla

Security researcher Jeremy Brown reported that the file naming scheme used for downloading a file which already exists in the downloads folder is predictable. If an attacker had local access to a victim's computer and knew the name of a file the victim intended to open through the Download Manage...

KesionCMS(section news)upload vulnerability-vulnerability warning-the black bar safety net

Prius special A bit tasteless,with a few days before the publication of the iis6 filename parsing vulnerability achieve to obtain webshell. First find the use of tech-ex systems site,registered members,and then input KSeditor/selectupfiles. asp, Open after upload x. asp;x. jpg format image file,i...

SAP Business One License Manager 2005 Buffer Overflow

This module exploits a stack buffer overflow in the SAP Business One 2005 License Manager 'NT Naming Service' A and B releases. By sending an excessively long string the stack is overwritten enabling arbitrary code execution. This module requires Metasploit: https://metasploit.com/download Curren...

Solaris Update for Federated Naming Service (FNS) X500 116997-01

Check for the Version of Federated Naming Service FNS X500 OpenVAS Vulnerability Test Solaris Update for Federated Naming Service FNS X500 116997-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Federated Naming Service (FNS) X500 116997-01

Check for the Version of Federated Naming Service FNS X500 OpenVAS Vulnerability Test Solaris Update for Federated Naming Service FNS X500 116997-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Federated Naming Service (FNS) X500 116998-01

Check for the Version of Federated Naming Service FNS X500 OpenVAS Vulnerability Test Solaris Update for Federated Naming Service FNS X500 116998-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Federated Naming Service (FNS) X500 116998-01

Check for the Version of Federated Naming Service FNS X500 OpenVAS Vulnerability Test Solaris Update for Federated Naming Service FNS X500 116998-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...