ldap-novell-getpass NSE Script

Universal Password enables advanced password policies, including extended characters in passwords, synchronization of passwords from eDirectory to other systems, and a single password for all access to eDirectory. In case the password policy permits administrators to retrieve user passwords "Allo...

Google Chrome < 11.0.696.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 11.0.696.71. Such versions of Chrome are affected by multiple vulnerabilities: - An unspecified error allows the pop-up blocker to be bypassed. Issue 72189 - A stale pointer can be left behind when floating point numbers ar...

TWiki 5.0.1 Cross Site Scripting

Information ----------------------------------- Name : XSS vulnerability in TWiki Software : TWiki 5.0.1 and possibily below. Vendor Hompeage : http://twiki.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-005 CVE : CVE-2011-1838...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user- supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the contex...

Atlassian Confluence 2.x >= 2.7 / 3.x < 3.4.6 Multiple XSS

According to its self-reported version number, the instance of Atlassian Confluence on the remote host is a 2.x version that is 2.7 or later, or else version 3.x prior to 3.4.6. It is, therefore, affected by multiple, cross-site scripting vulnerabilities. Errors in the validation of input data to...

omp2-brute NSE Script

Performs brute force password auditing against the OpenVAS manager using OMPv2. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the creds library...

Redmine 1.1.1 Cross Site Scripting

Information -------------------- Name : XSS vulnerability in Redmine Software : all Redmine versions from 1.0.1 to 1.1.1 Vendor Homepage : http://www.redmine.org Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-004 Description...

Debian DSA-2206-1 : mahara - several vulnerabilities

Two security vulnerabilities have been discovered in Mahara, a fully featured electronic portfolio, weblog, resume builder and social networking system : - CVE-2011-0439 A security review commissioned by a Mahara user discovered that Mahara processes unsanitized input which can lead to cross-site...

Tracks 1.7.2 Cross Site Scripting

Information -------------------- Name : XSS vulnerability in Tracks Software : Tracks 1.7.2. Vendor Hompeage : http://getontracks.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-003 Description ------------------ Tracks is a...

Mozilla Thunderbird 3.1 < 3.1.9 Invalid HTTP Certificates

The installed version of Thunderbird 3.1 is earlier than 3.1.9. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affect...

[DSECRG-11-009] SAP NetWaver XI SOAP Adapter - XSS

DSECRG-11-009 SAP NetWaver XI SOAP Adapter - XSS SAP NetWeaver 7.0 application XI SOAP Adapter has linked XSS vulnerability Digital Security Research Group DSecRG Advisory DSecRG-11-009 Internal DSecRG-00120 Application: SAP NetWeaver Versions Affected: SAP NetWeaver XI SOAP Adapter 3.0-7.11 Vend...

[DSECRG-11-010] SAP NetWeaver logon.html - XSS

DSECRG-11-010 SAP NetWeaver logon.html - XSS SAP NetWeaver BSP logon page has linked XSS vulnerability. Digital Security Research Group DSecRG Advisory DSecRG-11-010 Internal DSecRG-00127 Application: SAP NetWeaver Versions Affected: SAP NetWeaver SAPBASIS 620-730 Vendor URL: http://www.sap.com...

IBM Lotus Sametime Server stconf.nsf messageString Parameter XSS

The version of Lotus Sametime on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'messageString' parameter of the 'stconf.nsf' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a...

Safari < 5.0.4 Multiple Vulnerabilities

Binary data 801013.prm...

Majordomo2 _list_file_get() Directory Traversal

This module exploits a directory traversal vulnerability present in the listfileget function of Majordomo2 help function. By default, this module will attempt to download the Majordomo config.pl file. Module Options msf use auxiliary/scanner/http/majordomo2/directorytraversal msf...

Debian DSA-2180-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsing of...

Debian DSA-2166-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0777 Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly ha...

CouchDB < 1.0.2 Cross Site Scripting Issue

Binary data 5755.prm...

Nmap NSE: Oracle SID Brute

This script attempts to guess Oracle instance/SID names against the TNS-listener. This is a wrapper on the Nmap Security Scanner's http://nmap.org oracle-sid-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaporaclesidbrute.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap Oracle SID Brute N...

Nmap NSE: SMB psexec

This script attempts to implement remote process execution, allowing a user to run a series of programs on a remote machine and read the output. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-psexec.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbpsexec.nasl 7006 2017-08-25...