1569 matches found
memcached -- memcached stats maps Information Disclosure Weakness
Secunia reports: A weakness has been reported in memcached, which can be exploited by malicious people to disclose system information. The weakness is caused due to the application disclosing the content of /proc/self/maps if a stats maps command is received. This can be exploited to disclose e.g...
Update Protection against IBM Access Support ActiveX GetXMLValue Method Buffer Overflow
IBM Access Support ActiveX Control contains a buffer overflow vulnerability. The IBM Access Support ActiveX control is used by the vendor to collect system information, such as make, model, serial number, OS version, etc. This control is available on the IBM / Lenovo web site, and may also come...
CVE-2008-6159
Content Management Made Easy CMME 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function...
CVE-2008-6159
Content Management Made Easy CMME 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function...
CVE-2008-6159
Content Management Made Easy (CMME) 1.19 is affected by an information disclosure vulnerability where a direct request to info.php invokes phpinfo, allowing remote attackers to obtain system information. The flaw is triggered by accessing the info.php entry point, and the underlying cause is the ...
System Information Enumeration (via DMI)
Using the SMBIOS aka DMI interface, it was possible to retrieve information about the remote system's hardware, such as its product name and serial number. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35351; scriptversion"1.12";...
Code injection
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function...
CVE-2008-5322
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function...
CVE-2008-5322
The CVE-2008-5322 vulnerability affects Wysi Wiki Wyg 1.0. An invalid categup parameter to index.php triggers the phpinfo function, allowing remote attackers to obtain system information. The root cause is improper input handling leading to information disclosure through phpinfo. Public reference...
upnp-info NSE Script
Attempts to extract system information from the UPnP service. Script Arguments upnp-info.override Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. slaxml.debug See t...
pptp-version NSE Script
Attempts to extract system information from the point-to-point tunneling protocol PPTP service. Example Usage nmap -sV Script Output PORT STATE SERVICE VERSION 1723/tcp open pptp YAMAHA Corporation Firmware: 32838 Service Info: Host: RT57i Requires comm nmap shortport string local comm = require...
snmp-sysdescr NSE Script
Attempts to extract system information from an SNMP service. Script Arguments snmp.version See the documentation for the snmp library. creds.service, creds.global See the documentation for the creds library. Example Usage nmap -sU -p 161 --script snmp-sysdescr Script Output | snmp-sysdescr: HP...
BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report:...
BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= BolinOS 4.6.1 LFI/XSS Multiple Security Vulnerabilities ========================================================= Digital Security Research Group DSecRG Advisory DSECRG-08-022...
[DSECRG-08-022] Multiple Security Vulnerabilities in Bolinos 4.6.1
Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...
BolinOS 4.6.1 - Local File Inclusion / Cross-Site Scripting
Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...
CVE-2008-0149
TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function...
Information disclosure
TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function...
Novell ZENworks ESM客户端STEngine.exe本地权限提升漏洞
BUGTRAQ ID: 27146 CVECAN ID: CVE-2007-5665 Novell ZENworks Endpoint Security Management（ESM）的安全客户端允许集中管理防火墙保护策略。 ESM在处理命令的执行时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 当在工作站上安装ZENworks ESM的安全客户端时，就会将STEngine服务设置为在本地SYSTEM帐号下运行。以下可执行程序中实现这个服务： 文件名：STEngine.exe（1,847,296字节） 版本：3.5.0.20...