Missing or Permissive X-Frame-Options HTTP Response Header

The remote web server in some responses sets a permissive X-Frame-Options response header or does not set one at all. The X-Frame-Options header has been proposed by Microsoft as a way to mitigate clickjacking attacks and is currently supported by all major browser vendors %NASLMINLEVEL 70300 C...

CVE-2010-3696

The frdhcpdecode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause a denial of service infinite loop and daemon outage via a packet that has more than one sub-option...

JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities

JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities Name JE Guestbook Vendor http://www.joomlaextensions.co.in Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-09-30 X. INDEX I. ABO...

Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability

This host is installed with Microsoft Word and is prone to null pointer dereference vulnerability. OpenVAS Vulnerability Test $Id: secpodmsofficewordnullpntrdosvuln.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability Authors: Antu Sanadi...

Microsoft Windows - SMB Relay Code Execution (MS08-068) (Metasploit)

$Id: smbrelay.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Outlook - 'ATTACH_BY_REF_ONLY' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability

No description provided by source. =============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian...

vBulletin 3.8.4 / 3.8.5 Registration Bypass

=============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...

vBulletin 3.8.4/3.8.5 - Registration Bypass

=============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...

vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability

Exploit for php platform in category web applications ========================================================= vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability ========================================================= 010101010101010101010101010101010101010101010101010101010 0 0 1 Irani...

vBulletin 3.8.43.8.5 - Registration Bypass

vBulletin 3.8.43.8.5 - Registration Bypass =============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1...

MDVA-2010:184 : net-snmp

It was discovered that the snmpd daemon could segfault with certain configuration options. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Sun Java Web Server - System WebDAV OPTIONS Buffer Overflow (Metasploit)

$Id: sunjswsdavoptions.rb 9971 2010-08-07 06:59:16Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CustomCMS Persistent XSS Vulnerability

Exploit for php platform in category web applications ====================================== CustomCMS Persistent XSS Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Pulling Back the Curtain on Rogue AV Tech Support

We’ve blogged a few times about rogue AV, explaining how search engines have been abused using Black Hat Search Engine Optimization techniques to redirect web surfers to rogue AV websites. Recently, we’ve noticed that the rogue AVs being spread are all equipped with an “Online Support” button. Se...

HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow

Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP OpenView\www\bin\ovwebsnmpsrv.exe -dump...

Fedora 12 : tar-1.22-12.fc12 (2010-4309)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 - do not...

Firefox + NoScript Configurations

From the NoScript Options screen, select the Embeddings tab to find options for dealing with potentially dangerous objects on untrusted sites. You can also choose to apply these restrictions of whitelisted trusted sites. If this option is too intrusive, it can be turned off at the cost of increas...

Configuring JavaScript Settings

Once you click the Advanced button, a second window opens to allow you to disable specific JavaScript features. We recommend disabling all of the options displayed in this dialog...

Saving Files from Firefox

You will then see an Options window that has a Category row at the top and the features for that category below. The first category of interest is the General category. Select the option Always ask me where to save files. This will make it more obvious when a web page attempts to save a file to...