Design/Logic Flaw

Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the...

libpng Version Detection

Detects the installed version of libpng. The script logs in via ssh, searches for executable Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

Firefox Browser designMode Null Pointer Dereference DoS Vulnerability - Win

The host is installed with Mozilla Firefox browser and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxnullptrdosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Firefox Browser designMode Null Pointer Dereference DoS Vulnerability - Win Authors: Chandan S...

SUSE: Security Advisory for Sun Java (SUSE-SA:2009:001)

The remote host is missing updates announced in advisory SUSE-SA:2009:001. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Mozilla Firefox location.hash Remote DoS Vulnerability

The host is installed with Mozilla Firefox browser and is prone to denial of service vulnerability. Vulnerability: The flaw is due to improper way of handling input passed to location.hash. OpenVAS Vulnerability Test $Id: secpodfirefoxlocationhashdosvuln.nasl 6468 2017-06-28 14:05:02Z cfischer $...

Ad Management Java - Authentication Bypass

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.adserversolutions.com Software: Ad...

NPDS < 08.06 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/33051/info NPDS is prone to multiple input-validation vulnerabilities: - Multiple local file-include vulnerabilities - An HTML-injection vulnerability - Multiple SQL-injection vulnerabilities - Multiple cross-site scripting vulnerabilities Exploiting thes...

activetrade-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Trade v 2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

sfshotornot-sql.txt

SFS EZ Hot or Notviewcomments.php?phid Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Hot ot Not script : http://www.scripts-for-sites.info Risk : High...

SFS EZ Hot or Not (phid) Remote SQL Injection Vulnerability

No description provided by source. SFS EZ Hot ot Notviewcomments.php?phid Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Hot ot Not script :...

SFS EZ Hot or Not (phid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== SFS EZ Hot or Not phid Remote SQL Injection Vulnerability ===========================================================...

SFS EZ Hot or Not - phid SQL Injection

SFS EZ Hot or Not - phid SQL Injection SFS EZ Hot ot Notviewcomments.php?phid Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Hot ot Not script :...

SFS EZ Hot or Not - 'phid' SQL Injection

SFS EZ Hot ot Notviewcomments.php?phid Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Hot ot Not script : http://www.scripts-for-sites.info Risk : High...

strobe (NASL wrapper)

This VT is deprecated. Copyright C 2008 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it unde...

DataWizard FTPXQ Default Accounts

The remote FTP server has one or more default test accounts. Description : The version of DataWizard FTPXQ that is installed on the remote host has one or more default accounts setup which can allow an attacker to read and/or write arbitrary files on the system. OpenVAS Vulnerability Test $Id:...

linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes

No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char...

linux/mips - Linksys WRT54G/GL port bind shellcode 276 bytes

linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes. Shellcode exploit for linuxmips platform / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix...

JDK untrusted applet/application privilege escalation (6661918)

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as...

Fedora 8 : httpd-2.2.9-1.fc8 (2008-6314)

This update includes the latest release of httpd 2.2. A security issue is fixed in this update: A flaw was found in the handling of excessive interim responses from an origin server when using modproxyhttp. In a forward proxy configuration, if a user of the proxy could be tricked into visiting a...

Debian Security Advisory DSA 1608-1 (mysql-dfsg-5.0)

The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1608-1. OpenVAS Vulnerability Test $Id: deb16081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1608-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...