Trusted Sites Zone

The Trusted sites zone is a security zone for sites that you think are safe to visit. You believe that the site is designed with security in mind and that it can be trusted not to contain malicious content. To add or remove sites from this zone, you can click the Sites button. This will open a...

Maple Maplet File Creation and Command Execution

This module harnesses Maple's ability to create files and execute commands automatically when opening a Maplet. All versions up to 13 are suspected vulnerable. Testing was conducted with version 13 on Windows. Standard security settings prevent code from running in a normal maple worksheet withou...

XAMPP 1.7.2 - Change Administrative Password

Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 1.7.2 Tested on: Windows XP / Windows Vista CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // //...

Mozilla Firefox onunload SSL Certificate Spoofing (CVE-2004-0763)

Mozilla is a popular open-source Internet communication suite produced by the Mozilla Foundation. The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. There exists a vulnerability in the w...

Oracle Database Enumeration

This module provides a simple way to scan an Oracle database server for configuration parameters that may be useful during a penetration test. Valid database credentials must be provided for this module to run. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2009-3286

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

Practical analysis once the WinRoute Backdoor offensive and defensive live-vulnerability warning-the black bar safety net

The school through the Windows 2 0 0 0 and the winroute proxy way to access the Internet. These two days, the proxy server always appears some strange phenomenon, running the program seems to be very slow, but it will also automatically restart. Could it be a virus? Or in a Trojan. Anyway, go and...

Directory traversal

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6926

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6926

CVE-2008-6926 affects the Fantastico De Luxe Module for cPanel. Affected component: autoinstall4imagesgalleryupgrade.php. Root cause: directory traversal via the scriptpath_show parameter in a GoAhead action, enabling remote attackers to include and execute arbitrary local files. Impact: potentia...

CVE-2008-6926

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

Open 3 3 8 9 unable to login the 5 types of reasons-vulnerability warning-the black bar safety net

1, The server in the internal network. 2, the tcp/ip filtering. First execute the following cmd command: cmd /c regedit-e c:\1.reg HKEYLOCALMACHINE\SYSTEM\ControlSet001\Services\Tcpip export the registry concerning the TCP/IP filtering in the first place cmd /c regedit-e c:\2.reg...

CVE-2009-2213

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access...

Web Application Tests Settings

This script sets options for generic web tests. It does not perform any test by itself. Several scripts use the options set here to test web applications, look for cross-site scripting attacks, SQL injection, etc. in CGIs. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

For IIS write permissions for the simple analysis-vulnerability warning-the black bar safety net

//Or to be symbolic of a copyright, reproduced, please indicate the b0r3d's blog http://www.b0r3d.org //Last month to the Black hand cast went, people since there is no published, I will send to it, after all the articles of original content is too small, the technical content is not high. Recent...

CVE-2003-1573

The PointBase 4.6 database component in the J2EE 1.4 reference implementation J2EE/RI allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun...

CVE-2003-1573

The CVE-2003-1573 entry concerns the PointBase 4.6 database component used in the J2EE 1.4 reference implementation (J2EE/RI). The vulnerability allows remote attackers to execute arbitrary programs, cause a denial of service, and obtain sensitive information through a crafted SQL statement. Root...

Novell GroupWise MTA Web Console Accessible

The remote web server is a Novell GroupWise MTA Web Console, used to monitor and potentially control a GroupWise MTA via a web browser. By allowing unauthenticated access, anyone may be able to do things such as discover the version of GroupWise installed on the remote host and its configuration,...

Microsoft Internet Explorer Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

PT-2008-5344 · Microsoft · Xml Core Services

Name of the Vulnerable Software and Affected Versions: Microsoft XML Core Services versions 3.0 through 4.0 Description: The issue allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs...