WoltLab Burning Board Cross-Site Request Forgery Vulnerability

This host is running WoltLab Burning Board and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodwoltlabburningboardcsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoltLab Burning Board Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyrigh...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. VID e15f2356-9139-11de-8f42-001aa0166822 OpenVAS Vulnerability Test $ Description: Auto generated from VID e15f2356-9139-11de-8f42-001aa0166822 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

KVIrc URI Handler Argument Injection Vulnerability

This host has KVIrc installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodkvircarginjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ KVIrc URI Handler Argument Injection Vulnerability Authors: Antu Sanadi Copyright c 2009 SecPod, http://www.secpod.com...

Adobe Acrobat < 8.1.3 Multiple Vulnerabilities

The version of Adobe Acrobat installed on the remote host is earlier than 9.0 / 8.1.3. Such versions are reportedly affected by multiple vulnerabilities : - There is a published denial of service issue. CVE-2008-2549 - A stack-based buffer overflow when parsing format strings containing a floatin...

Windows x64 Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 460 include Msf::Payload::Windows include Msf::Payload::Single includ...

openSUSE Security Update : kernel (kernel-1214)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.29 fixing various bugs and security issues. Following security issues were fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel...

Microsoft Internet Explorer XML Document DoS Vulnerability (Aug 2009)

Internet Explorer is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Password cracking (NASL wrappers common options)

This plugin sets options for the various password cracking tools. OpenVAS Vulnerability Test Remote password cracking - common options Based on hydra scripts by Michel Arboi Authors: Vlatko Kosturjak This program is free software; you can redistribute it and/or modify it under the terms of the GN...

RedHat Security Advisory RHSA-2009:1156

The remote host is missing updates announced in advisory RHSA-2009:1156. The Apache HTTP Server is a popular Web server. A denial of service flaw was found in the Apache modproxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume...

CVE-2009-2574

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...

CVE-2009-2574

CVE-2009-2574 affects MiniTwitter 0.2 beta. The flaw in index.php lets remote authenticated users modify certain options of arbitrary accounts via an opt action. Exploitation is documented (Exploit-DB) and related references link to insecure parameter handling; CVSS from NVD indicates a medium ri...

CVE-2009-2574

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...

Unix Command Shell, Reverse TCP (via netcat)

Creates an interactive shell via netcat This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

httpd: AllowOverride Options=IncludesNoExec allows Options Includes

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring 1 Options Includes, 2 Options +Includes, or 3 Options +IncludesNOEXEC in a .htaccess file, and then...

httpd: AllowOverride Options=IncludesNoExec allows Options Includes

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring 1 Options Includes, 2 Options +Includes, or 3 Options +IncludesNOEXEC in a .htaccess file, and then...

Important: Red Hat Security Advisory: httpd security update

Updated httpd packages that fix multiple security issues are now available for Red Hat Application Stack v2. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A denial of service flaw was found in...

Nwahy Dir 2.1 Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

xscreensaver 5.01 - Arbitrary File Disclosure Symlink

xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver...

xscreensaver Symlink Attack

xscreensaver local arbitrary file disclosure | symlink attack The ´xscreensaver´ program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver program...

xscreensaver local arbitrary file disclosure | symlink attack

xscreensaver local arbitrary file disclosure | symlink attack The "xscreensaver" program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver program...