GLSA-200605-16 : CherryPy: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200605-16 CherryPy: Directory traversal vulnerability Ivo van der Wijk discovered that the 'staticfilter' component of CherryPy fails to sanitize input correctly. Impact : An attacker could exploit this flaw to obtain arbitrary...

ZipCentral ZIP File Handling Buffer Overflow

According to its version, the ZipCentral program installed on the remote host is affected by a stack-based buffer overflow when handling a ZIP file with specially crafted filenames. C Tenable Network Security include"compat.inc"; if description scriptid21620; scriptversion"1.18";...

XOOPS xoopsConfig Parameter Variable Overwrite Local File Inclusion

The version of XOOPS installed on the remote host allows an unauthenticated attacker to skip processing of the application's 'include/common.php' script and thereby to gain control of the variables '$xoopsConfiglanguage' and '$xoopsConfigthemeset', which are used by various scripts to include PHP...

GLSA-200605-15 : Quagga Routing Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200605-15 Quagga Routing Suite: Multiple vulnerabilities Konstantin V. Gavrilenko discovered two flaws in the Routing Information Protocol RIP daemon that allow the processing of RIP v1 packets carrying no authentication even when...

ACal embed/day.php path Parameter Remote File Inclusion

The remote host is running ACal, an open source, web-based event calendar written in PHP. The version of ACal installed on the remote host fails to sanitize user-supplied input to the 'path' parameter of the 'embed/day.php' script before using it in PHP 'include' functions. Provided PHP's...

VNC Security Type Enforcement Failure Remote Authentication Bypass

The version of VNC server running on the remote host is affected by the following vulnerabilities : - A flaw exists in RealVNC due to an error when handling password authentication. A remote attacker can exploit this to bypass authentication by using a specially crafted request in which the clien...

Claroline ldap.inc.php clarolineRepositorySys Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'clarolineRepositorySys' parameter of the 'claroline/auth/extauth/drivers/ldap.inc.php' script...

GDB Server Detection

The remote host is running gdbserver, a program which can be used to run the GDB debugger on a different machine than the one which is running the program being debugged. Since gdbserver offers no authentication whatsoever, an attacker may connect to this port, change the value of the registers a...

phpWebFTP index.php language Parameter Local File Inclusion

The remote host is running phpWebFTP, a web-based FTP client written in PHP. The version of phpWebFTP installed on the remote host fails to sanitize user-supplied input to the 'language' parameter of the 'index.php' script before using it in a PHP 'include' function. An unauthenticated attacker m...

gCards < 1.46 Multiple Vulnerabilities

The remote host is running gCards, a free electronic greeting card system written in PHP. The installed version of gCards fails to sanitize user input to the 'setLang' parameter in the 'inc/setLang.php' script which is called by 'index.php'. An unauthenticated attacker may be able to exploit this...

msie-createTextRang.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Microsoft Internet Explorer - createTextRang Remote (Metasploit)

Microsoft Internet Explorer - createTextRang Remote Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Allegro Software RomPager 2.10 Denial of Service

The remote host is running Allegro Software RomPager version 2.10, according to its banner. This version is vulnerable to a denial of service when sending a specifically crafted malformed request. OpenVAS Vulnerability Test $Id: allegrodos.nasl 8023 2017-12-07 08:36:26Z teissa $ Description:...

Discuz! <= 4.0.0 rc4 Arbitrary File Upload Flaw

The remote host is using Discuz!, a popular web application forum in China. According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. An attacker may be able to exploit this issue to execute arbitrary commands on th...

Kerio WinRoute Firewall HTTP/HTTPS Management Detection

The remote host is running a firewall application. Description : The remote host appears to be running the Kerio WinRoute Firewall application. It is possible to access the HTTP or HTTPS management interface on the host. OpenVAS Vulnerability Test $Id: keriowrfmanagementdetection.nasl 8023...

VisNetic / Merak Mail Server multiple flaws

The remote webmail server is affected by multiple vulnerabilities which may allow an attacker to execute arbitrary commands on the remote host. Description: The remote host is running VisNetic / Merak Mail Server, a multi-featured mail server for Windows. The webmail and webadmin services include...

Cyberstrong eShop SQL Injection Vulnerabilities

The remote host is running Cyberstrong eShop, a shopping cart written in ASP. The remote version of this software contains several input validation flaws leading to SQL injection vulnerabilities. An attacker may exploit these flaws to affect database queries, possibly resulting in disclosure of...

SUSE-SA:2006:014: gpg

The remote host is missing the patch for the advisory SUSE-SA:2006:014 gpg. The GNU Privacy Guard GPG allows crafting a message which could check out correct using '--verify', but would extract a different, potentially malicious content when using '-o --batch'. The reason for this is that a .gpg ...

PHP iCalendar Cookie Data Traversal Local File Inclusion

The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The version of PHP iCalendar installed on the remote host fails to sanitize input to cookie data normally used to store language and template user preferences before using it in a PHP...

MS06-012: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (905413)

The remote host is running a version of Microsoft Office that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the font parsing handler would result in code execution. C Tenable...