2173 matches found
SMB Registry : Stop the Registry Service after the scan (WMI)
Binary data wmistopregistrysvc.nbin...
CVE-2009-3759
Multiple cross-site request forgery CSRF vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators for 1 requests that change the password via the username parameter to config/changepw.php or 2 stop a...
PT-2009-6003 · Citrix · Citrix Xencenterweb
Name of the Vulnerable Software and Affected Versions: Citrix XenCenterWeb affected versions not specified Description: The issue concerns multiple cross-site request forgery CSRF vulnerabilities in sample code within the XenServer Resource Kit in Citrix XenCenterWeb. These vulnerabilities allow...
South River Technologies WebDrive Service privilege escalation
No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location:...
Microsoft Windows Kernel Privilege Escalation Vulnerability (971486)
This host is missing a critical security update according to Microsoft Bulletin MS09-058. OpenVAS Vulnerability Test $Id: secpodms09-058.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Privilege Escalation Vulnerability 971486 Authors: Nikita MR Updated By: Madhuri D on 2010-11-...
Microsoft Windows Kernel Privilege Escalation Vulnerability (971486)
This host is missing a critical security update according to Microsoft Bulletin MS09-058. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Design/Logic Flaw
Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls th...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...
CVE-2009-1464
Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...
TYPSoft FTP Server 'ABORT' Command Remote Denial of Service Vulnerability
TYPSoft FTP Server is prone to a remote denial-of-service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rhinosoft Serv-U FTP Multiple Vulnerabilities
This host is running Serv-U FTP Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodservuftpservermultvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Rhinosoft Serv-U FTP Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
linux/x86 rm -rf / attempts to block the process from being stopped
No description provided by source. / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax "\x89\xC1" // mov ecx, eax "\x41" // inc ecx "\xB0\x30" // mov al, 0x30 ;...
CVE-2008-2941
CVE-2008-2941 is tied to the hpssd message parser in HP Linux Imaging and Printing (HPLIP) 1.6.7. A local attacker can cause a denial of service by sending specially crafted packets to TCP port 2207, stopping the hpssd process. The issue is documented across multiple advisories (e.g., RHSA-2008:0...
CVE-2008-3138: Exposure of Sensitive Information to an Unauthorized Actor
The 1 PANA and 2 KISMET dissectors in Wireshark formerly Ethereal 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service application stop via unknown vectors...
Unfixed XSS vulnerability at www.stop-sign.com
Security researcher PaPPy, has submitted on 07/07/2008 a cross-site-scripting XSS vulnerability affecting www.stop-sign.com, which at the time of submission ranked 37706 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currentl...
Yayoi Kaikei improper handling of credential information
Overview Yayoi Kaikei Quick Navigator sends user credentials unencrypted. Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can...
CVE-2007-6146: Improper Input Validation
Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service service stop via a "specific file" argument to an FTP command...
Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability
Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability Download: http://www.xcomputer.cz/ Bug found by JosS / Jose Luis Gngora Fernndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "power by xcomputer.cz" Sto...
WWWISIS 7.1 - 'IsisScript' Local File Disclosure / Cross-Site Scripting
WWWISIS Search Multiple Vulnerabilities Download: http://bvsmodelo.bvsalud.org/php/level.php?lang=en&component=31&item=2 Bug found by JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com d0rk: powered by WWWISIS Stop lammer Local File Disclosure Vulnerability:...
CVE-2007-4122: Undefined Security Weakness
Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer HV 06-00 through 06-71-/B allows remote attackers to cause a denial of service application stop and web interface outage via certain "unexpected data."...