CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

PT-2010-4133 · Ibm +6 · Aix +7

Name of the Vulnerable Software and Affected Versions: InterSect Alliance Snare Agent versions 3.2.3 and earlier on Solaris InterSect Alliance Snare Agent versions 3.1.7 and earlier on Windows InterSect Alliance Snare Agent versions 1.5.0 and earlier on Linux and AIX InterSect Alliance Snare Agen...

Snare Agent web interface cross-site request forgery vulnerabilities

Overview The Snare Agent web interface is susceptible to cross-site request forgery attacks. Description The web interface allows the administrator to manage several agent settings, including changing the listening port and password. These HTTP requests do not perform proper validity checks and a...

Solaris 10 (x86) : 124631-42 (deprecated)

SunOS 5.10x86: System Administration Appl. Date this patch was last updated by Sun : Jun/28/10 This plugin has been deprecated and either replaced with individual 124631 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 10 (sparc) : 124630-42 (deprecated)

SunOS 5.10: System Administration Applicat. Date this patch was last updated by Sun : Jun/28/10 This plugin has been deprecated and either replaced with individual 124630 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris KCMS + TTDB Arbitrary File Read

This module targets a directory traversal vulnerability in the kcmsserver component from the Kodak Color Management System. By utilizing the ToolTalk Database Server's TTISBUILD procedure, an attacker can bypass existing directory traversal validation and read arbitrary files. Vulnerable systems...

Generic Payload Handler

This module is a stub that provides all of the features of the Metasploit payload system to exploits that have been launched outside of the framework. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Solaris Sadmind - Command Execution (Metasploit)

$Id: sadmindexec.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit)

$Id: ttyprompt.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Sun Solaris Telnet - Remote Authentication Bypass (Metasploit)

$Id: fuser.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Samba 2.2.8 (Solaris SPARC) - 'trans2open' Remote Overflow (Metasploit)

$Id: trans2open.rb 9571 2010-06-21 16:53:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Solaris 10 (sparc) : 145102-01

SunOS 5.10: wanboot patch. Date this patch was last updated by Sun : Jun/18/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes

No description provided by source. / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/shellstorm ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Date: 2010-06-07...

Solaris/x86 - Sync & reboot & exit0 - 48 bytes

Solaris/x86 - Sync & reboot & exit0 - 48 bytes. Shellcode exploit for solarisx86 platform / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan ! Database of shellcodes:...

Security Advisory for Flash Player, Adobe Reader and Acrobat

Security Advisory for Flash Player, Adobe Reader and Acrobat Release date: June 4, 2010 Last updated: June 10, 2010 Vulnerability identifier: APSA10-01 CVE number: CVE-2010-1297 Platform: All Summary A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows,...

Flash Patch: Adobe Plugs 32 Critical Vulnerabilities

Adobe has shipped a “critical” Flash Player update to fix a total of 32 documented vulnerabilities in the ubiquitous software product. The Adobe Flash Player 10.1.53.64 update comes on the heels of last week’s in-the-wild attacks against a zero-day hole in Adobe’s Reader and Flash Player product...

solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes

Exploit for solaris/x86 platform in category shellcode ==================================================== Solaris/x86 - Sync & reboot & exit0 - 48 bytes ==================================================== / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan Web:...

[security bulletin] HPSBMA02537 SSRT010027 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02217439 Version: 1 HPSBMA02537 SSRT010027 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

Adobe to Release Flash Patch June 10

Adobe said on Monday that it will have a patch available for the newly discovered critical vulnerability in Flash ready by June 10 for most platforms. The patches for Adobe Reader and Acrobat, which also are affected by the flaw, won’t be released until June 29. The new flaw was discovered late...

[security bulletin] HPSBMA02538 SSRT100136 rev.1 - HP ServiceCenter Running on AIX, HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02076821 Version: 1 HPSBMA02538 SSRT100136 rev.1 - HP ServiceCenter Running on AIX, HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security...