9106 matches found
VxWorks Debugging Service Security Bypass Vulnerability
VxWorks is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...
ClickIt Proof Of Concept
X-Frame-Options is worth less than you think var w; var dummy; var it; // Precache stuff. x = new Image; x.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/'; x2 = new Image; x2.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/beaver-peak.jpg'; x3 = new Image; x3.src...
SuSE 10 Security Update : coreutils (ZYPP Patch Number 7658)
This update fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. It also fixes a bug : - 702995: Added -L and -P commandline options to...
Low: Red Hat Security Advisory: virt-v2v security and bug fix update
An updated virt-v2v package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
Fixed in Apache Tomcat 6.0.35
Note: The issues below were fixed in Apache Tomcat 6.0.34 but the release vote for the 6.0.34 release candidate did not pass. Therefore, although users must download 6.0.35 to obtain a version that includes a fix for this issue, version 6.0.34 is not included in the list of affected versions...
MDVA-2011:083 : bind
The default configuration and compiled in options for ISC BIND uses DNSSEC per default which under certain circumstances can result in huge latencies due to the overhead of trying to validate each lookup, and everytime. This has now been disabled in the configuration file...
ISC DHCP dhclient DHCP client shell unfiltered characters vulnerability
Shell characters vulnerability on server options processing...
CVE-2011-2569
Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188...
rtsp-methods NSE Script
Determines which methods are supported by the RTSP real time streaming protocol server. Script Arguments rtsp-methods.path the path to query, defaults to "" which queries the server itself, rather than a specific url. Example Usage nmap -p 554 --script rtsp-methods Script Output PORT STATE SERVIC...
How to Create a Custom SureBackup Test Script
Purpose This article provides information about creating custom SureBackup roles and scripts which can be used to enhance SureBackup testing. Solution Information regarding custom SureBackup roles can be found here: https://helpcenter.veeam.com/docs/backup/vsphere/creatingxmlfiles.html Informatio...
emlog 4.1.0 敏感信息泄漏漏洞
emlog是一款基于PHP和MySQL平台的功能强大的个人博客系统blog，该版本存在敏感信息泄漏的漏洞。 泄露作者名称： http://site/content/cache/user 泄露配置信息 http://site/content/cache/options 漏洞证明 修复方案： 升级最新官方版本，官方链接：www.emlog.net...
Linux kernel-2.6.18-6 x86 Local Root Exploit
No description provided by source. include include include include include include include include define NUMCPUS 8 define ATM "/proc/net/atm/avc" int mainvoid char err, adurit2000; int i, ret, sock, proc; struct atmqos dj; struct sockaddratmsvc addr; sock = socketPFATMSVC, SOCKDGRAM, 0; memset&d...
WebCookiesSniffer - New cookies sniffer/viewer utility
WebCookiesSniffer - New cookies sniffer/viewer utility WebCookiesSniffer is a new packet sniffer utility that captures all web site cookies sent between the web browser and the web server and displays them in a simple cookies table. The upper pane of WebCookiesSniffer displays the cookie string...
http-cors NSE Script
Tests an http server for Cross-Origin Resource Sharing CORS, a way for domains to explicitly opt in to having certain methods invoked by another domain. The script works by setting the Access-Control-Request-Method header field for certain enumerated methods in OPTIONS requests, and checking the...
Fedora 14 : openldap-2.4.23-10.fc14 (2011-3627)
Changes not covered by bugs : - removed slurpd options from sysconfig/ldap - fix: possible NULL pointer dereference in NSS implementation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
[SECURITY] Fedora 15 Update: foomatic-4.0.8-3.fc15
Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. This package contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database packaged separately. There is also the...
Pscan 2.0 - multi threaded TCP Syn port scanner
Pscan 2.0 - multi threaded TCP Syn port scanner TCP Port scanner Multi threaded with possibility to scan 65535. TCP ports on an IP address.You can specify how many threads to run and the timeout. Further more it will tell you the MAC address of the target and the service runningFor LINUX and...
quake3-info NSE Script
Extracts information from a Quake3 game server and other games which use the same protocol. Example Usage nmap -sU -sV -Pn --script quake3-info.nse -p Script Output PORT STATE SERVICE VERSION 27960/udp open quake3 Quake 3 dedicated server | quake3-info: | PLAYERS: | 1. cyberix frags: 0/20, ping: ...