Novell PlateSpin Orchestrate Remote Code Execution

Novell PlateSpin Orchestrate is installed on the remote host. According to its version, this software does not properly sanitize user data before calling a graph rendering module which reportedly can be abused by an unauthenticated, remote attacker to run arbitrary code and gain complete control ...

Apache HTTP Server 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

Apache HTTP Server is prone to an information disclosure vulnerability that affects the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MantisBT < 1.2.3 Multiple XSS Vulnerabilities

MantisBT is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

giop-info NSE Script

Queries a CORBA naming server for a list of objects. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE REASON 1050/tcp open java-or-OTGfileshare syn-ack | giop-info: | Object: Hello | Context: Test | Object: GoodBye Requires giop shortport stdnse local giop = require "giop" local...

MTDesing SQL Login Authentication by pass Vulnerability

Exploit for php platform in category web applications ======================================================= MTDesing SQL Login Authentication by pass Vulnerability ======================================================= +: MTDesing SQL Login by pas vuln. Date: 07.57 10.07.210 Author: Curly...

BlaherTech Placeto CMS - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/41190/info BlaherTech Placeto CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Hot or Not Picture Rating Script - SQL Injection

Hot or Not Picture Rating Script - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Pictue rating SQL Vulnerable Version:1 Price:20$...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)

This host is missing an important security update according to Microsoft Bulletin MS10-037. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SLAD LOGWATCH run

This script connects to SLAD on a remote host to run remote LOGWATCH. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. Copyright C 2010 Greenbone Networks...

UBUNTU-CVE-2010-1620

Integer overflow in the loadiface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a 1 file or 2 socket that provides configuration data with many entries, leading to a heap-based buffer overflow...

Mac OS X 10.6.1 Update

The remote host is missing Mac OS X 10.6.1 Update. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

SuSE Update for acroread SUSE-SA:2010:022

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:022 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Cisco IOS Software Crafted TCP Packet Denial of Service Vulnerability

Cisco IOS® Software is affected by a denial of service vulnerability that may allow a remote unauthenticated attacker to cause an affected device to reload or hang. The vulnerability may be triggered by a TCP segment containing crafted TCP options that is received during the TCP session...

OpenSSL 'bn_wexpand()' Multiple Vulnerabilities - Windows

OpenSSL is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OpenOffice Multiple Remote Code Execution Vulnerabilities - Feb10

This host has OpenOffice running which is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultcodeexecvulnwinfeb10.nasl 5323 2017-02-17 08:49:23Z teissa $ OpenOffice Multiple Remote Code Execution Vulnerabilities - Feb10 Authors: Veerendra G...

kvm: emulator privilege escalation IOPL/CPL level check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability - Linux

GZip is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:gzip"; ifdescription...

Invision Power Board 1.3.1 and lower Versions SQL injection vulnerability-vulnerability warning-the black bar safety net

Invision Power Board is a widely used WEB-based program. Invision Power Board there is an input validation vulnerability, a remote attacker could exploit this to performSQL injectionattack. Due to not be able to properly filter user-supplied data, an attacker may by the st parameter in the Insert...

Joomla DMS SQL Injection

/ Joomla Component comdms Remote SQL injection vulnerability - categoryid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 28 January, 2010 / Software Information + Vendor : http://joomdonation.com/ + Info :...

PowerDNS (Authoritative Server and Recursor) Detection (DNS)

DNS TCP and UDP based detection of PowerDNS Authoritative Server and Recursor. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...