DTSA-204-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...

CVE-2009-3697

SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters...

CVE-2009-2853

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to 1 admin-footer.php, 2 edit-category-form.php, 3 edit-form-advanced.php, 4 edit-form-comment.php, 5 edit-link-category-form.php, 6 edit-link-form.php, 7 edit-page-form.php, and 8 edit-tag-form.php in wp-admin...

ultrize timesheet 1.2.2 - Remote File Inclusion

===================================================================================== o Ultrize TimeSheet 1.2.2 Remote File Inclusion Vulnerability Software : Ultrize TimeSheet version 1.2.2 Vendor : http://www.ultrize.com/ Download : http://www.ultrize.com/timesheet/download/timeSheet-20080505.z...

CVE-2009-2174

GUPnP 0.12.7 allows remote attackers to cause a denial of service crash via an empty 1 subscription or 2 control message...

Predictable session ID vulnerability in Serene Bach

Overview Serene Bach from SerendipityNZ Limited contains a vulnerability in which it generates predictable session ID's. Serene Bach from SerendipityNZ Limited is a weblog management system. Serene Bach contains a vulnerability in which it generates predictable session ID's. Impact A remote...

Pidgin Detection (Windows SMB Login)

This script detects the installed version of Pidgin on Windows. The script logs in via smb, searches for Pidgin in the registry and gets the Pidgin path and version from registry. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

动漫广告吧管理系统v1.0漏洞

1.存在SQL注入漏洞 2.所有添加图片的功能页面都没有限制任何恶意后缀文件 3.暴库 ver 1.0 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本...

Packeteer Web Management Interface Version

It is possible to determine the version of the remote web application. Description : OpenVAS was able to determine the software version of the Packeteer web management interface running on the remote host. OpenVAS Vulnerability Test $Id: packeteerwebversion.nasl 5499 2017-03-06 13:06:09Z teissa $...

Patchlink Detection

The remote host has a patch management software installed on it. Description : This script uses Windows credentials to detect whether the remote host is running Patchlink and extracts the version number if so. Patchlink is a fully Internet-based, automated, cross-platform, security patch manageme...

x7chat-lfi.txt

==================================================================== o X7 Chat = 2.0.1A1 Local File Inclusion Vulnerability Software : X7 Chat version 2.0.5.1 Vendor : http://x7chat.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling

Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling Esqlanelapse Software Project version: 2.6.1 & 2.6.2 Insecure Cookie Handling Vulnerability donwload: http://sourceforge.net/project/showfiles.php?groupid=118575&packageid=129141&releaseid=519061...

Fez 1.32.0 RC1 - list.php SQL Injection

Fez 1.32.0 RC1 - list.php SQL Injection ------------------------------------------------------------------------------ Fez software Version 1.3 AND 2.0 RC1 list.php - SQL Injection Vulnerability http://sourceforge.net/projects/fez About:- Fez is an open source project to produce and maintain a...

RSS-aggregator 1.0 - IdFlux SQL Injection

RSS-aggregator 1.0 - IdFlux SQL Injection source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...

Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service Vulnerabilities Advisory ID: cisco-sa-20080521-ssh http://www.cisco.com/warp/public/707/cisco-sa-20080521-ssh.shtml Revision 1.0 For Public Release 2008 May 21 1600 UTC GMT...

Linksys phone adapter denial of service

Linksys phone adapter denial of service Product Information Product Name: SPA-2102 Serial Number: FM500G582390 Software Version: 3.3.6 Hardware Version: 1.2.5a Another device hit with the PoD! ping -l 65500 192.168.0.1 Only seems to work on the internal network. discovered by sipher...

F5 BIG-IP Web Management Interface Version

An F5 BIG-IP web management interface is running on this port, and Nessus has determined its software version. Note. HTTP credentials are required to retrieve version information. TRUSTED...

NetScaler Web Management Interface IP Address Cookie Information Disclosure

It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. %NASLMINLEVEL 70300 netscalerwebcookieinfo.nasl GPLv2 History: 1.00, 11/21/07 - Initial...

project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ project alumni = 1.0.9 Remote XSS / SQL Injection Vulnerability ================================================================ project-alumni sql injection & xss author :...