Design flaw in AS3 socket handling allows port probing

Design flaw in AS3 socket handling allows port probing Summary Due to a design flaw in ActionScript 3 socket handling, compiled Flash movies are able to scan for open TCP ports on any host reachable from the host running the SWF, bypassing the Flash Player Security Sandbox Model and without the...

Mozilla Foundation Security Advisory 2007-11

Mozilla Foundation Security Advisory 2007-11 Title: FTP PASV port-scanning Impact: Low Announced: March 20, 2007 Reporter: [email protected] Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.3 Firefox 1.5.0.11 Description The FTP protocol includes the PASV passive command which is used by...

security flaw

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

Opera 9.x - FTP PASV Port-Scanning

Opera 9.x - FTP PASV Port-Scanning source: https://www.securityfocus.com/bid/23089/info Opera is prone to vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports a...

Mozilla FireFox 1.5.x2.0 - FTP PASV Port-Scanning

Mozilla FireFox 1.5.x2.0 - FTP PASV Port-Scanning source: https://www.securityfocus.com/bid/23082/info Mozilla Firefox is prone to vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect...

KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning

source: https://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports and potentially reveal...

Opera 9.x - FTP PASV Port-Scanning

source: https://www.securityfocus.com/bid/23089/info Opera is prone to vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports and potentially reveal sensitive...

dos command to scan the network segment the port-bug warning-the black bar safety net

Does not require any tools,dos command to scan a network all the ports! In win2000 the following Open a dos window, then execute for /l %a in 1,1,254 do start /min /low telnet 192.168.0.% a 3 3 8 9 Such 1 9 2. 1 6 8. 0. x this segment of all the open 3 3 8 9 port medalist of the machine will be...

Cisco Security Agent for Linux DoS

Port scanning causes system resources exhaustion...

JavaScript code can cause the browser attack-vulnerability warning-the black bar safety net

Security researchers have found a Use JavaScript to scan the family and the enterprise network, and attacks on the network server, and the router and printer and other equipment of the method. Researchers say the malicious JavaScript code can be embedded in a Web page, use the browser to browse t...

Shield SQLFindCandy database scanning-vulnerability warning-the black bar safety net

One, SQLFindCandy scan SQLFindCandy write it the people called the village of rain he said it was Cool, Oh the others are also good） Software Description The following functions: 1. To find a network all the SQl Server2000 Server! 2. For network own to modify the SQL Server Portnon-1 4 3 3The...

Cheops NG without password

The remote service does not require a password for access. Description : The Cheops NG agent on the remote host is running without authentication. Anyone can connect to this service and use it to map your network, port scan machines and identify running services. OpenVAS Vulnerability Test $Id:...

Cheops NG clear text authentication

A Cheops NG agent is running on the remote host. Description : Cheops NG is running on this port. Users with a valid account on this machine can connect to this service and use it to map your network, port scan machines and identify running services. Passwords are transmitted in clear text and...

SQL overflow new method!! Broilers do not worry!!- Vulnerability warning-the black bar safety net

Today I used this method got almost 2 0 Station broiler chickens. Uh it!!!! To use several tool!! nc.exe sqlhello.exe Proxy Hunter now!! First with proxy Hunter scan 1 4 3 3 port! This everyone should be. To play QB when you can say is... Uh... and Sweep to finishing it.. Export. Replaced the...

CVE-2005-3756

Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports...

CVE-2005-3756

Nessus plugin data in the connected document associates CVE-2005-3756 with Google Search Appliance proxystylesheet vulnerabilities that include remote access flaws enabling port scanning and potential code execution (via unsanitized proxystylesheet input). The CVE description in the initial docum...

CVE-2005-3756

Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports...

Google Search Appliance proxystylesheet Parameter Multiple Remote Vulnerabilities (XSS, Code Exec, ID)

The remote Google Search Appliance / Mini Search Appliance fails to sanitize user-supplied input to the 'proxystylesheet' parameter, which is used for customization of the search interface. Exploitation of this issue may lead to arbitrary code execution as an unprivileged user, port scanning, fil...

Cheops NG Unauthenticated Access

The Cheops NG agent on the remote host is running without authentication. Anyone can connect to this service and use it to map your network, port scan machines and identify running services. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20161; scriptversion "$Revisio...

Dabber worm detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...