Default Novonyx Web Server Files

Novell Netware default Novonyx web server files. A default installation of Novell 5.x will install the Novonyx web server. Numerous web server files included with this installation could reveal system information. OpenVAS Vulnerability Test $Id: novellnovonyxdefaultfiles.nasl 8023 2017-12-07...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. Reading the configuration file /officescan/hotdownload/ofcscan.ini will reveal information on your system. More...

Amanda client version

This detects the Amanda backup system client version. The client version gives potential attackers additional information about the system they are attacking. SPDX-FileCopyrightText: 2005 Paul J. Ewing Jr. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

LCDproc server detection

LCDproc is a system that is used to display system information and other data on an LCD display or any supported display device, including curses or text. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Default Novonyx Web Server Files

Novell Netware default Novonyx web server files. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SA17243] Xerver Multiple Vulnerabilities

TITLE: Xerver Multiple Vulnerabilities SECUNIA ADVISORY ID: SA17243 VERIFY ADVISORY: http://secunia.com/advisories/17243/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: Xerver 4.x...

PHP Advanced Transfer Manager Multiple Vulnerabilities

Secunia Advisory: SA16867 Release Date: 2005-09-20 Critical: Moderately critical Impact: Cross Site Scripting Exposure of system information Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: PHP Advanced Transfer Manager 1.x Select a product and view a...

PBLang 4.65 (possibly prior versions) remote code execution

PBLang 4.65 possibly prior versions remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure software: description: PBLang is a powerful flatfile Bulletin Board System. It combines many features of a professional board,...

flatnuke256.txt

Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc tested on Windows software: site: http://flatnuke.sourceforge.net/flatnuke/ 1 cross site scripting:...

CVE-2004-2408

Technical details for CVE-2004-2408 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2408

Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the ho...

[SA16283] Microsoft ActiveSync Denial of Service and Equipment ID Enumeration

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2004-2252

The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks...

CVE-2002-2007

The CVE-2002-2007 vulnerability affects Apache Tomcat 3.2.3 and 3.2.4, where remote attackers could obtain sensitive information (directory listings and web root path) via erroneous HTTP requests to JSP-related paths (test/jsp, samples/jsp, examples/jsp) or the test/realPath.jsp servlet, leaking ...

CVE-2002-2007

The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages JSP in the 1 test/jsp, 2 samples/jsp and 3 examples/jsp directories, or the 4...

[SA15970] Xerox WorkCentre Pro Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA15819] NateOn Messenger Directory Listing Disclosure Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA15200] Quick.Forum Topic Script Insertion Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Quick.Forum Topic Script Insertion Vulnerability SECUN...

[DR018] Quartz Composer / QuickTime 7 information leakage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The canonical URI of this advisory is http://remahl.se/david/vuln/ 018/. This advisory concerns an as-yet unpatched problem in QuickTime 7 on Mac OS X 10.4. The reason for disclosure before a vendor patch is that another person realized the potential...

CVE-2001-1434

Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...