CVE-2012-4013

The WebView class in the Cybozu KUNAI Browser for Remote Service application beta for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL...

CVE-2012-4013

CVE-2012-4013 affects the WebView component in Cybozu KUNAI Browser for Remote Service beta (Android). The vulnerability allows a crafted app to place JavaScript into a local file accessed via a file:// URL, enabling remote attackers to execute arbitrary JavaScript and potentially disclose sensit...

Psexec Via Current User Token

Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Psexec Via Current User Token

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex' require...

Quagga < 0.99.18 BGPD Multiple Denial of Service Vulnerabilities

According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability can be triggered by a malformed ASPATHLIMIT path attribute. CVE-2010-1675 - A denial ...

PHP 'Content-Length'标头远程服务访问漏洞

BUGTRAQ ID: 52704 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP在实现上存在远程拒绝服务漏洞，如果发送带有较大的Content-Length标头值的HTTP请求到内置的PHP网络服务器，攻击者可利用此漏洞耗尽可用的内存，拒绝服务合法用户。 0 PHP 5.5.0-DEV PHP 5.4.1RC1-DEV 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net !/usr/bin/python Title: PHP 5.4....

HP Data Protector Media Operations DBServer opcode 0x10 Traversal Arbitrary File Access

HP Data Protector Media Operations is affected by a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Successfully exploiting the issue may allow an attacker to obtain read arbitrary files that could aid in further attacks. %NASLMINLEVEL 70300 C...

CVE-2011-3043

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox aka flexible box in conjunction with the floating of elements...

OpenSSL 0.9.7 < 0.9.7f Vulnerability

The version of OpenSSL installed on the remote host is prior to 0.9.7f. It is, therefore, affected by a vulnerability as referenced in the 0.9.7f advisory. - The derchop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwri...

UBUNTU-CVE-2011-4461

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The krb5db2lockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4, when the db2 aka Berkeley DB back end is used, allows remote attackers to cause a denial of...

SSL / TLS Renegotiation DoS

The remote service encrypts traffic using TLS / SSL and permits clients to renegotiate connections. The computational requirements for renegotiating a connection are asymmetrical between the client and the server, with the server performing several times more work. Since the remote host does not...

Zend Server Java Bridge Arbitrary Java Code Execution

Zend Server Java Bridge, a service that lets PHP applications use Java code, has an arbitrary code execution vulnerability. The service accepts requests to execute Java code without authentication. A remote, unauthenticated attacker could exploit this to execute arbitrary Java code. C Tenable...

Telnet Service START_TLS Support

The remote Telnet service supports the use of a 'STARTTLS' option to switch from a cleartext to an encrypted communications channel. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51890; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

OpenSSL Detection

Based on its response to a TLS request with a specially crafted server name extension, it seems that the remote service is using the OpenSSL library to encrypt traffic. Note that this plugin can only detect OpenSSL implementations that have enabled support for TLS extensions RFC 4366. TRUSTED...

CGI Generic Fragile Parameters Detection (potential)

A web application hosted on the remote service returned 50x response codes when discovered CGIs were called with invalid values. These codes may have several origins : - A web application firewall or another defense mechanism may abruptly interrupt the request. - There could be a transient web...

netsaint-statd Daemon Detection

The remote service is a netsaint-statd daemon, a system monitoring tool designed to be integrated with Netsaint, although it can also be used without that. Netsaint is not maintained any more, the project evolved to Nagios. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Nmap NSE: Banner Grabber

This script attempts to connect to the target port and returns the banner of the remote service. This is a wrapper on the Nmap Security Scanner's http://nmap.org banner.nse OpenVAS Vulnerability Test $Id: gbnmapbannergrabber.nasl 8233 2017-12-22 09:37:31Z cfischer $ Wrapper for Nmap Banner Grabbe...

D-link Click 'n Connect Daemon Detection

The remote service is the D-link Click 'n Connect Daemon DCCD, a remote networking service provided on some D-link networking devices that allows a remote client to view and configure the D-link device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47605;...

cpio: Heap-based buffer overflow by expanding a specially-crafted archive

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...