Oracle MySQL 5.6.x < 5.6.12 Multiple Vulnerabilities

Binary data 6934.prm...

MiniBB 3.0.0 Cross Site Scripting / SQL Injection

Information -------------------- Name : XSS and SQL Injection Vulnerabilities in MiniBB Software : MiniBB 3.0.0 and possibly below. Vendor Homepage : http://www.minibb.com Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Omar Kurt Advisory Reference :...

PHP 5.3.x < 5.3.27 Multiple Vulnerabilities

According to its banner, the version of PHP 5.3.x installed on the remote host is prior to 5.3.27. It is, therefore, potentially affected by the following vulnerabilities: - A buffer overflow error exists in the function 'pdopgsqlerror'. Bug 64949 - A heap corruption error exists in numerous...

ria_enumerator

This plugin searches for various Rich Internet Application files. It currently searches for: Google gears manifests These files are used to determine which files are locally cached by google gears. They do not get cleared when the browser cache is cleared and may contain sensitive information. Fl...

frontpage

This plugin audits the frontpage extension configuration by trying to upload a file to the remote server using the author.dll script provided by FrontPage. Plugin type Audit Options Name | Type | Default Value | Description | Help ---|---|---|---|--- stopOnFirst | boolean | True | Stop on the fir...

Adobe ColdFusion Multiple Vulnerabilities (APSA13-03)

The version of Adobe ColdFusion running on the remote host is affected by the following vulnerabilities : - A directory traversal vulnerability exists in /administrator/mail/download.cfm. A remote, authenticated attacker can exploit this issue to download arbitrary files. - A local file include...

Linux/Cdorked.A Backdoor

Binary data cdorkedremote.nbin...

Mozilla Thunderbird < 12.0 Multiple Vulnerabilities

Binary data 6792.prm...

MediaWiki 1.19.x < 1.19.5 / 1.20.x < 1.20.4 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by multiple security vulnerabilities : - A flaw exists because the application fails to validate input passed via Lua function names before returning it to the user. This allows a remote attacker to...

Oracle MySQL Server 5.6.x < 5.6.11 Multiple Vulnerabilities

Binary data 6768.prm...

[Vega v1.0] Web Application Security Scanner

Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting XSS, inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux , OS X , and Window...

Opera < 12.15 Multiple Vulnerabilities

Binary data 800866.prm...

SuSE 11.2 Security Update : puppet (SAT Patch Number 7526)

puppet has been updated to fix 2.6.18 multiple vulnerabilities and bugs. - 19391 Find the catalog for the specified node name - Don't assume master supports SSLv2 - Don't require openssl client to return 0 on failure - Display SSL messages so we can match our regex - Don't assume puppetbindir is...

HP LaserJet Pro Printers Unauthorized Data Access

Binary data hplaserjetprodataaccess.nbin...

Debian DSA-2649-1 : lighttpd - fixed socket name in world-writable directory

Stefan Buhler discovered that the Debian specific configuration file for lighttpd webserver FastCGI PHP support used a fixed socket name in the world-writable /tmp directory. A symlink attack or a race condition could be exploited by a malicious user on the same machine to take over the PHP contr...

FreeBSD : puppet26 -- multiple vulnerabilities (04042f95-14b8-4382-a8b9-b30e365776cf)

Moses Mendoza reports : A vulnerability found in Puppet could allow an authenticated client to cause the master to execute arbitrary code while responding to a catalog request. Specifically, in order to exploit the vulnerability, the puppet master must be made to invoke the 'template' or...

Debian DSA-2643-1 : puppet - several vulnerabilities

Multiple vulnerabilities were discovered in Puppet, a centralized configuration management system. - CVE-2013-1640 An authenticated malicious client may request its catalog from the puppet master, and cause the puppet master to execute arbitrary code. The puppet master must be made to invoke the...

PHP 5.3.x < 5.3.22 Multiple Vulnerabilities

Binary data 801086.prm...

Nmap NSE 6.01: auth-owners

Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. OpenVAS Vulnerability Test $Id: gbnmap6authowners.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE...

Nmap NSE 6.01: mysql-info

Connects to a MySQL server and prints information such as the protocol and version numbers, thread ID, status, capabilities, and the password salt. If service detection is performed and the server appears to be blocking our host or is blocked because of too many connections, then this script isn'...