210 matches found
UBUNTU-CVE-2016-5437
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log...
PT-2016-6431
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.12 and earlier Description The issue allows remote administrators to affect availability via vectors related to Server: Log. It is an easily exploitable vulnerability that allows a high privileged attacker with networ...
PhEmail - Automate Sending Phishing Emails
PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test. The main purpose of PhEmail is to send a bunch of phishing emails and prove who clicked on them without attempting to exploit the web browser or email...
用友旗下某服务器日志平台泄露用户隐私及企业数据
简要描述： RT,好在量不大。 详细说明： http://223.203.195.109:8080/log 漏洞证明：...
[SECURITY] Fedora 20 Update: denyhosts-2.6-29.fc20.1
DenyHosts is a Python script that analyzes the sshd server log messages to determine which hosts are attempting to hack into your system. It also determines what user accounts are being targeted. It keeps track of the frequency of attempts from each host and, upon discovering a repeated attack...
Joomla Re-Issues Security Update After Patches Glitch
Users of the Joomla content management system have been on a patching roller coaster the past 24 hours with one set of patches for critical vulnerabilities being pulled last night before being re-issued today. The Joomla update, bringing the CMS up to version 3.3.6, is a security update addressin...
[SECURITY] Fedora 20 Update: webalizer-2.23_08-1.fc20
The Webalizer is a Web server log analysis program. It is designed to scan Web server log files in various formats and produce usage statistics in HTML format for viewing through a browser. It produces professional looking graphs which make analyzing when and where your Web traffic is coming from...
BEA WebLogic 7.0/8.1 Administration Console Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14657/info BEA WebLogic administration console is prone to cross-site scripting attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of...
CVE-2012-0059
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the...
CVE-2012-0059 Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the...
PT-2014-2202
Name of the Vulnerable Software and Affected Versions Red Hat Network RHN Satellite and Proxy version 5.4 Description The issue allows remote administrators to obtain user passwords by reading the server log and an email when a system registration XML-RPC call fails. This occurs because cleartext...
RHEL 5 / 6 : Red Hat Network Proxy spacewalk-backend (RHSA-2012:0102)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0102 advisory. Red Hat Network RHN Proxy provides a mechanism for caching content, such as package updates from Red Hat or custom content created for an...
[SECURITY] Fedora 18 Update: awstats-7.0-11.fc18
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
LogToServer action lets anyone log messages to the server log
Available without authentication. This can be used to hide breakin attempts or fill the disk if no log rotation is in place...
LogToServer action lets anyone log messages to the server log
Available without authentication. This can be used to hide breakin attempts or fill the disk if no log rotation is in place...
Oracle WebLogic Server Unspecified Information Disclosure (CVE-2008-2578)
According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified, local information disclosure vulnerability in the WebLogic console or server log. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
[SECURITY] Fedora 16 Update: awstats-7.0-5.fc16
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
[SECURITY] Fedora 15 Update: awstats-7.0-5.fc15
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
PT-2011-4068
Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS versions 6.2 through 6.2.0.3-TIV-ITDS-IF0004 Description The issue allows remote attackers to obtain sensitive information via a crafted URL because authentication is not required for access to LDAP Server log...
CVE-2011-2758: Improper Authentication
IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...