3308 matches found
RedHat Update for samba RHSA-2007:1114-01
Check for the Version of samba OpenVAS Vulnerability Test RedHat Update for samba RHSA-2007:1114-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
CVE-2009-0759
Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors...
OpenSSL CA Certificate Security Bypass Vulnerability
This host is running OpenSSL and is prone to Security Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodopensslcacertbypassvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ OpenSSL CA Certificate Security Bypass Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
CentOS Update for tog-pegasus CESA-2008:0002 centos4 x86_64
Check for the Version of tog-pegasus OpenVAS Vulnerability Test CentOS Update for tog-pegasus CESA-2008:0002 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
MLdonkey 2.9.7 - Arbitrary File Disclosure
MLdonkey 2.9.7 - Arbitrary File Disclosure MLdonkey up to 2.9.7 has a vulnerability that allows remote user to access any file with rights of running Mldonkey daemon by supplying a special-crafted request ok, there's not much special about double slash to an Mldonkey http GUI tcp/4080 usually...
MLdonkey 2.9.7 Double Slash File Disclosure
MLdonkey up to 2.9.7 has a vulnerability that allows remote user to access any file with rights of running Mldonkey daemon by supplying a special-crafted request ok, there's not much special about double slash to an Mldonkey http GUI tcp/4080 usually. Reference:...
MLdonkey <= 2.9.7 HTTP DOUBLE SLASH Arbitrary File Disclosure Vuln
Exploit for multiple platform in category remote exploits ================================================================== MLdonkey = 2.9.7 HTTP DOUBLE SLASH Arbitrary File Disclosure Vuln ================================================================== MLdonkey up to 2.9.7 has a vulnerabilit...
MLdonkey 2.9.7 - Arbitrary File Disclosure
MLdonkey up to 2.9.7 has a vulnerability that allows remote user to access any file with rights of running Mldonkey daemon by supplying a special-crafted request ok, there's not much special about double slash to an Mldonkey http GUI tcp/4080 usually. Reference:...
SquirrelMail软件包会话处理绕过认证漏洞
BUGTRAQ ID: 33354 CVECAN ID: CVE-2009-0030 SquirrelMail是一款PHP编写的WEBMAIL程序。 Red Hat为CVE-2008-3663所提供的修复导致SquirrelMail对所有的会话都设置了相同的SQMSESSID Cookie值，这允许通过认证的远程用户通过使用标准的webmail.php接口访问其他用户的文件夹列表和配置数据。 SquirrelMail 1.4.8 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:0057-01）以及相应补丁:...
GraphicsMagick Multiple Vulnerabilities - Linux
GraphicsMagick graphics tool is prone to multiple buffer overflow/underflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-0359
Multiple cross-site scripting XSS vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the 1 message title or 2 user full name...
Sun Java System Application Server Information Disclosure vulnerability
The host is running Java Application Server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavaappservinfodiscvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java System Application Server Information Disclosure vulnerability Authors: Sharath S...
Apple Safari JavaScript Engine Cross Domain Information Disclosure Vulnerability
The host is running Apple Safari web browser which is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodapplesafarijsinfodiscvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Apple Safari JavaScript Engine Cross Domain Information Disclosure Vulnerability Authors:...
Comersus Shopping Cart <= v6 Remote User Pass Exploit
Title : Comersus Shopping Cart = v6 Remote User Pass Exploit Author : "ajann" from Turkey Contact : : S.Page : http://www.comersus.com/ $$ : Free Dork : Powered by Comersus v6 Shopping Cart DorkEx : http://www.google.com.tr/search?hl=tr&q=Powered+by+Comersus+v6+Shopping+Cart&btnG=Ara&meta=...
Comersus Shopping Cart 6.0 - Remote User Pass
Comersus Shopping Cart 6.0 - Remote User Pass Title : Comersus Shopping Cart Name Last Name Company Phone Email...
Samba 3.2.0 - 3.2.6 Unauthorized Access
According to its banner, the version of the Samba server on the remote host is between 3.2.0 and 3.2.6 inclusive. Such versions reportedly allow an authenticated, remote user to gain access to the root filesystem, subject to his or her privileges, by making a request for a share called '' empty...
Phorum violation.php3转发任意邮件漏洞
BUGTRAQ: 2272 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个漏洞允许远程用户发送任意邮件，而且不需要任何验证。 violation.php3处理URL的参数，通过主机的MTA给Mod参数指定的email发送邮件，不过要记住的是，这封电子邮件会包含攻击者的IP（或代理服务器IP）和FQDN。恶意用户可能利用这个漏洞发送垃圾邮件或邮件炸弹等行径，可能让WEB主机的IP被加入垃圾邮件服务器的黑名单。 3.0.7 and Previous Brian Moon...
sdbsearch.cgi
The SuSE cgi SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.80084";...
CVE-2008-3996
Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMSCDCIPUBLISH...
Hammer Software MetaGauge 1.0.0.17 Directory Traversal Vulnerability
No description provided by source. Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest...