CVE-2009-3900

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...

OCS Inventory NG 1.2.1 (systemid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= OCS Inventory NG 1.2.1 systemid SQL Injection Vulnerability ============================================================= OCS Inventory NG Server 1.2.1 Details: The Open Compute...

OCS Inventory NG 1.2.1 - 'systemid' SQL Injection

OCS Inventory NG Server 1.2.1 Details: The Open Computer and Software OCS Inventory Next Generation NG provides relevant inventory information about system configurations and software on the network. Download : http://www.ocsinventory-ng.org/index.php?page=1-02-1 Found by : Guilherme Marinheiro...

LightNEasy sqlno-db 2.2.x - System Configuration Disclosure

LightNEasy sqlno-db 2.2.x - System Configuration Disclosure !/usr/bin/perl LightNEasy sql/no-db new PeerAddr = $host, PeerPort = 80, Proto = 'tcp', || die $!;...

OCS Inventory NG 1.02 Multiple SQL Injection Vulnerabilities

No description provided by source. OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability has been fixed...

DedeCMSV53 arbitrary variable overwrite vulnerability-vulnerability warning-the black bar safety net

DedeCMSV53 arbitrary variable overwrite vulnerability See today mrxhming students a articles http://hi.baidu.com/mrxhming/blog/item/8176f00bf540f11795ca6b3f.html find this old BUG hasn't been patched to look like, from the inside of the forum go a pp out of it, everyone is welcome to shoot the...

Sun Java System Identity Manager多个安全漏洞

BUGTRAQ ID: 34191 Sun Java System Identity Manager是一个完整的端到端的保护敏感数据和管理标识配置文件与许可的解决方案。 Sun Java System Identity Manager（IdM）受多个安全漏洞影响，具体如下： 由于没有使用SSL加密某些连接，远程非特权用户可以非授权访问客户端与IdM服务器之间所传输的数据（17763）。 本地或远程非特权用户可以判断是否存在有效的IdM帐号名（18052，18104）。 在IdM服务器上拥有帐号的用户可以更改其他IdM帐号的口令（18578）。...

CVE-2008-6478

Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...

Fedora Update for util-linux FEDORA-2007-2462

Check for the Version of util-linux OpenVAS Vulnerability Test Fedora Update for util-linux FEDORA-2007-2462 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Authentication flaw

servermgrd Server Manager in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

==================================================== Security Research Advisory Vulnerability name: "3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass" Advisory number: LC-2008-05 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affecte...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

No description provided by source. ==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom...

3Com OfficeConnect Wireless Cable/DSL Router - Authentication Bypass

==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom ==================================================== An unauthenticated user may...

3Com OfficeConnect Wireless CableDSL Router - Authentication Bypass

3Com OfficeConnect Wireless CableDSL Router - Authentication Bypass ==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom...

CVE-2008-2367

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

PT-2009-21: CMS.Pilot SQL Injection Vulnerability

CMS.Pilot is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

DEBIAN-CVE-2008-4311

The default configuration of system.conf in D-Bus aka DBus before 1.2.6 omits the sendtype attribute in certain rules, which allows local users to bypass intended access restrictions by 1 sending messages, related to sendrequestedreply; and possibly 2 receiving messages, related to...

Xerox WorkCentre Extensible Interface Platform Unspecified Security Bypass (XRX08-006)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly contains an unspecified vulnerability affecting the Extensible Interface Platform feature in the product's Web Services. A remote attacker may be able to leverage this issue to make...

Fedora 8 : system-config-network-1.5.10-1.fc8 (2008-4633)

This security update fixes system-config-network-1.5.5-1.fc8, where the console file from Fedora 9 was distributed. This bug enabled every console user to change the network configuration. Systems with system-config- network-1.5.5-1.fc8 installed should install this update. Note that Tenable...

NEC MultiWriter 1700C web server authentication bypass vulnerability

Overview Certain NEC printers have build-in web servers. They contain a vulnerability, where unauthorized users could change the system configuration. Impact A remote attacker could change the system configuration of the printer's built-in web server. Solution None...