AIX 610000 : U818437

The remote host is missing AIX PTF U818437 which is related to the security of the package bos.rte.bosinst You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

A common situation is back to execute the xp_cmdshell-vulnerability warning-the black bar safety net

Common case resume execution of xpcmdshell. 1 could not find stored procedure'master..xpcmdshell'. Recovery method: query separator connected, The first step to perform:EXEC spaddextendedproc xpcmdshell,@dllname ='xplog70.dll'declare @o int The second step execution:spaddextendedproc 'xpcmdshell'...

Fedora Update for pam FEDORA-2007-546

Check for the Version of pam OpenVAS Vulnerability Test Fedora Update for pam FEDORA-2007-546 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

PHP-Fusion Mod TI (id) Remote SQL Injection Vulnerability

No description provided by source. PHP-Fusion Mod TI - Blog System Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

Workaround for Adobe Reader and Acrobat util.printf Stack Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file. Portable Document Format PDF is an open file format created by Adobe Systems. It is use...

Simple Document Management System 1.1.4 SQL Injection Auth Bypass

No description provided by source. SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, thi...

Microsoft Office Excel REPT Formula Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page, or open a malicious file. The specific flaw exists when parsing Microsof...

A4Desk Event Calendar - v Remote File Inclusion

A4Desk Event Calendar - v Remote File Inclusion source: https://www.securityfocus.com/bid/31507/info A4Desk Event Calendar is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)

Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service PoC !/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending...

FreeBSD Ports: linux-realplayer

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: tikiwiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

php escapeshellcmd multibyte encoding vulnerability analysis and extension-a vulnerability warning-the black bar safety net

漏洞 公告 在 http://www.sektioneins.de/advisories/SE-2008-03.txt PHP 5 = 5.2.5 PHP 4 = 4.4.8 Some allow as GBK, EUC-KR, SJIS, etc. wide byte character set systems may be affected by this impact, the impact is still very large, the domestic virtual host should be the pass to kill, in testing this...

Open Digital Assets Repository System 1.0.2 - Remote File Inclusion

Open Digital Assets Repository System 1.0.2 - Remote File Inclusion source: https://www.securityfocus.com/bid/29881/info Open Digital Assets Repository System ODARS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploi...

Sun Java System Active Server Pages multiple security vulnerabilities

Information leaks, commands injection, directory traversals, buffer overflows, authentication bypass...

AIX 610000 : U817229

The remote host is missing AIX PTF U817229 which is related to the security of the package xlC.rte.9.0.0.5 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610000 : U814421

The remote host is missing AIX PTF U814421 which is related to the security of the package bos.pkcs11 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

USN-612-2: OpenSSH vulnerability

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...

USN-612-1: OpenSSL vulnerability

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...

Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page, open a malicious email, or open a malicious file. The specific flaw exis...

EasySite 2.0 - browser.php Remote File Inclusion

EasySite 2.0 - browser.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...