1201 matches found
An error log data are not sanitized
An error log data are not sanitized Severity: none CVE-2009-4487 Not vulnerable: none Vulnerable: all...
BELL-CVE-2009-1914 CVE-2009-1914 does not affect BellSoft software
Bulletin has no description...
Immunity Canvas: ROUNDCUBE
Name| roundcube ---|--- CVE| CVE-2008-5619 Exploit Pack| CANVAS Description| RoundCube Code Execution Notes| CVE Name: CVE-2008-5619 VENDOR: Roundcube.net Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-5619 References: 'None' CVSS: 10.0...
realvnc-dos.txt
!/usr/bin/php ?php RealVNC Windows Client DoS AppName: vncviewer.exe AppVer: 4.1.2.0 ModName: vncviewer.exe ModVer: 4.1.2.0 Offset: 000229e0 function vncear $port = "5900"; $ser = socketcreateAFINET, SOCKSTREAM, SOLTCP; socketsetoption$ser,SOLSOCKET,SOREUSEADDR,1; socketbind$ser,"0.0.0.0", $port;...
VNC Authentication None Detection
Detect VNC servers that support the "None" authentication method. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VNC Authentication None Detection', 'Description' = 'Detect VNC servers that...
Critical: Red Hat Security Advisory: krb5 security update
Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authentica...
UBUNTU-CVE-2007-5109
Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...
CVE-2006-6491
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006. Notes: none...
PHP-Update 2.7 - adminuploads.php Remote Code Execution
PHP-Update 2.7 - adminuploads.php Remote Code Execution !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author =...
PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution
!/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date = "2006-10-21"; my $settings = "none...
DEBIAN-CVE-2006-2450
auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369...
CVE-2006-2450: Undefined Security Weakness
auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369...
CVE-2006-2369: Improper Authentication
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server,...
CVE-2005-1919
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
phpMyFAQ Detection
The remote host is running phpMyFAQ, a multi-lingual database-driven FAQ system using PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17297; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
CVE-2004-1242
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004. Notes: none...
phpBB Detection
The remote host is running phpBB, a bulletin-board system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid15779; scriptversion"1.25"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"phpBB Detection";...
Horde Software Detection
The remote host is running Horde, a PHP-based application framework from The Horde Project. This script was written by George A. Theall, . See the Nessus Scripts License for details. include"compat.inc"; if description scriptid15604; scriptversion"1.24";...
Service Detection (2nd Pass)
This plugin is a complement of findservice1.nasl. It attempts to identify common services which might have been missed because of a network problem. C Tenable Network Security, Inc. if NASLLEVEL 2200 exit0; include"compat.inc"; ifdescription scriptid14772; scriptversion "$Revision: 1.51 $";...
IlohaMail Software Detection
The remote host is running IlohaMail, a webmail application that is based on a stock build of PHP and that does not require either a database or a separate IMAP library. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the Nessus Scripts License for details...