9678 matches found
OCS Inventory NG 1.02 - Multiple SQL Injections
OCS Inventory NG 1.02 - Multiple SQL Injections OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability ha...
cscope -- multiple buffer overflows
Secunia reports: Some vulnerabilities have been reported in Cscope, which potentially can be exploited by malicious people to compromise a user's system. The vulnerabilities are caused due to various boundary errors, which can be exploited to cause buffer overflows when parsing specially crafted...
Secunia Research: UltraISO Image Parsing Buffer Overflow Vulnerabilities
====================================================================== Secunia Research 01/04/2009 - UltraISO Image Parsing Buffer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...
Secunia Research: UltraISO Image Name Parsing Format String Vulnerabilities
====================================================================== Secunia Research 01/04/2009 - UltraISO Image Name Parsing Format String Vulnerabilities - ====================================================================== Table of Contents Affected...
Yap Blog < 1.1.1 RFI Vulnerability - Active Check
Yap Blog is prone to a remote file inclusion RFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow
====================================================================== Secunia Research 25/02/2009 - SHOUTcast DNAS Relay Server Buffer Overflow - ====================================================================== Table of Contents Affected...
MetaBBS 0.11 - Administration Settings Authentication Bypass
MetaBBS 0.11 - Administration Settings Authentication Bypass source: https://www.securityfocus.com/bid/33626/info MetaBBS is prone to a vulnerability that lets attackers modify arbitrary user passwords because it fails to adequately secure access to administrative functionality. Exploiting this...
Default Password (profense) for 'operator' Account
The account 'operator' on the remote host has the password 'profense'. An attacker may leverage this to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "operator"; password = "profense"; include'deprecatednasllevel.inc'; include'compat.inc...
Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow
====================================================================== Secunia Research 07/01/2009 - TSC2 Help Desk CTab ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...
netatalk -- arbitrary command execution in papd daemon
Secunia reports: A vulnerability has been reported in Netatalk, which potentially can be exploited by malicious users to compromise a vulnerable system. The vulnerability is caused due to the papd daemon improperly sanitising several received parameters before passing them in a call to popen. Thi...
Trillian Messenger Multiple Vulnerabilities
This host is installed with Trillian Messenger and is prone to multiple remote memory corruption vulnerabilities. OpenVAS Vulnerability Test $Id: gbtrillianmultvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Trillian Messenger Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008...
Availscript Article Script Remote File Upload Vulnerability
No description provided by source. Availscript Article Script Remote File Upload Vulnerability ---------------------------------------------------------- Discovered By: S.W.A.T. [email protected] Home: www.batlagh.com Script Page: http://www.availscript.com/articlescript.php...
Debian 'login' 本地权限升级漏洞
Debian is prone to a local privilege-escalation vulnerability because of an error in the 'login' program. Local attackers in the UTMP group could exploit this issue to take ownership of arbitrary files on the vulnerable system. This may lead to a complete compromise of the system. Debian Linux 3....
Microsoft Office RTF Consecutive Drawing Object Parsing Heap Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page, open a malicious e-mail, or open a malicious file. The specific flaw...
Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow
====================================================================== Secunia Research 22/10/2008 - GNU Enscript "setfilename" Special Escape Buffer Overflow - ====================================================================== Table of Contents Affected...
Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows
====================================================================== Secunia Research 22/10/2008 - Trend Micro OfficeScan CGI Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...
Eaton Network Shutdown Module < 3.20 Authentication Bypass / Command Execution
According to its version number, the Network Shutdown Module install on the remote host is earlier than 3.20. It therefore reportedly fails to require authentication before allowing a remote attacker to add custom actions through the 'paneactionbutton.php' script and then execute them via the...
Python 2.5.2 - 'Imageop' Module Argument Validation Buffer Overflow
source: https://www.securityfocus.com/bid/31932/info Python's 'imageop' module is prone to a buffer-overflow vulnerability. Successful exploits may allow attackers to execute arbitrary code in the context of applications using the vulnerable Python modules. This may result in a compromise of the...
DFFFrameworkAPI - 'DFF_config[dir_include]' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/31644/info DFFFrameworkAPI is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Sagem Routers F@ST Remote CSRF Exploit (dhcp hostname attack)
No description provided by source. !/usr/bin/env python OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO...