[DSECRG-11-009] SAP NetWaver XI SOAP Adapter - XSS

DSECRG-11-009 SAP NetWaver XI SOAP Adapter - XSS SAP NetWeaver 7.0 application XI SOAP Adapter has linked XSS vulnerability Digital Security Research Group DSecRG Advisory DSecRG-11-009 Internal DSecRG-00120 Application: SAP NetWeaver Versions Affected: SAP NetWeaver XI SOAP Adapter 3.0-7.11 Vend...

[DSECRG-11-010] SAP NetWeaver logon.html - XSS

DSECRG-11-010 SAP NetWeaver logon.html - XSS SAP NetWeaver BSP logon page has linked XSS vulnerability. Digital Security Research Group DSecRG Advisory DSecRG-11-010 Internal DSecRG-00127 Application: SAP NetWeaver Versions Affected: SAP NetWeaver SAPBASIS 620-730 Vendor URL: http://www.sap.com...

IBM Lotus Sametime Server stconf.nsf messageString Parameter XSS

The version of Lotus Sametime on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'messageString' parameter of the 'stconf.nsf' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a...

Safari < 5.0.4 Multiple Vulnerabilities

Binary data 801013.prm...

Majordomo2 _list_file_get() Directory Traversal

This module exploits a directory traversal vulnerability present in the listfileget function of Majordomo2 help function. By default, this module will attempt to download the Majordomo config.pl file. Module Options msf use auxiliary/scanner/http/majordomo2/directorytraversal msf...

Debian DSA-2180-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsing of...

Debian DSA-2166-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0777 Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly ha...

CouchDB < 1.0.2 Cross Site Scripting Issue

Binary data 5755.prm...

Nmap NSE: Oracle SID Brute

This script attempts to guess Oracle instance/SID names against the TNS-listener. This is a wrapper on the Nmap Security Scanner's http://nmap.org oracle-sid-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaporaclesidbrute.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap Oracle SID Brute N...

Nmap NSE: SMB psexec

This script attempts to implement remote process execution, allowing a user to run a series of programs on a remote machine and read the output. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-psexec.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbpsexec.nasl 7006 2017-08-25...

Nmap NSE: Citrix Enum Servers

This script attempts to extract a list of Citrix servers from the ICA Browser service. This is a wrapper on the Nmap Security Scanner's http://nmap.org citrix-enum-servers.nse. OpenVAS Vulnerability Test $Id: gbnmapcitrixenumservers.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Citrix...

Nmap NSE: NetBIOS Stat

This script attempts to retrieve the remote system's NetBIOS names and MAC address. This is a wrapper on the Nmap Security Scanner's http://nmap.org nbstat.nse. OpenVAS Vulnerability Test $Id: gbnmapnbstat.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap NetBIOS Stat NSE script. Authors:...

Nmap NSE: SMTP Strange Port

This script attempts to check if SMTP is running on a non-standard port. This is a wrapper on the Nmap Security Scanner's http://nmap.org smtp-strangeport.nse. OpenVAS Vulnerability Test $Id: gbnmapsmtpstrangeport.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap SMTP Strange Port NSE...

Nmap NSE: SNMP Brute

This script attempts to find an SNMP community string by brute force guessing. This is a wrapper on the Nmap Security Scanner's http://nmap.org snmp-brute.nse. OpenVAS Vulnerability Test $Id: gbnmapsnmpbrute.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap SNMP Brute NSE script. Authors:...

Nmap NSE: MS SQL Info

This script attempts to extract information from Microsoft SQL Server instances. This is a wrapper on the Nmap Security Scanner's http://nmap.org ms-sql-info.nse. OpenVAS Vulnerability Test $Id: gbnmapmssqlinfo.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap MS SQL Info NSE script...

Nmap NSE: RealVNC Authentication Bypass

This script attempts to check if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. This is a wrapper on the Nmap Security Scanner's http://nmap.org realvnc-auth-bypass.nse. OpenVAS Vulnerability Test $Id: gbnmaprealvncauthbypass.nasl 7006 2017-08-25 11:51:20Z teissa $...

Nmap NSE: X11 Access

This script attempts to check if you are allowed to connect to the X server. This is a wrapper on the Nmap Security Scanner's http://nmap.org x11-access.nse. OpenVAS Vulnerability Test $Id: gbnmapx11access.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap X11 Access NSE script. Authors:...

Nmap NSE: UPnP Info

This script attempts to extract system information from the UPnP service. This is a wrapper on the Nmap Security Scanner's http://nmap.org upnp-info.nse. OpenVAS Vulnerability Test $Id: gbnmapupnpinfo.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap UPnP Info NSE script. Authors:...

Nmap NSE: Finger

This script attempts to retrieve a list of usernames using the finger service. This is a wrapper on the Nmap Security Scanner's http://nmap.org finger.nse. OpenVAS Vulnerability Test $Id: gbnmapfinger.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Finger NSE script. Authors: NSE-Script:...

Nmap NSE: DNS Random TXID

This script attempts to check a DNS server for the predictable-TXID DNS recursion vulnerability. This is a wrapper on the Nmap Security Scanner's http://nmap.org dns-random-txid.nse. OpenVAS Vulnerability Test $Id: gbnmapdnsrandomtxid.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap DNS...