JspRun! The forum management background injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: JspRun! The forum management background the export variable is not filtered, directly into the query statement, resulting in the background, you can operate the database, access to system privileges. Vulnerability analysis: in processing the background documents submitt...

Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability Authors: Antu Sana...

Apple iTunes Multiple Vulnerabilities - Mar11

This host has iTunes installed, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbappleitunesmultvulnmar11.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Multiple Vulnerabilities - Mar11 Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Apple iTunes Multiple Vulnerabilities (HT4554)

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

Oracle Java SE Code Execution Vulnerability (Windows)

This host is installed with Sun Java SE and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodoraclejavacodeexecvulnwin.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Code Execution Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

Symantec Alert Management System AMSSendAlertAck Stack Buffer Overflow (CVE-2010-0110)

Symantec Alert management System 2 AMS2 is a package used by various Symantec solutions such as System Center, AntiVirus Server, and AntiVirus Central Quarantine Server. AMS2 starts multiple services on the system that run with System account privileges, by default. A stack buffer overflow...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2476687)

This host is missing a critical security update according to Microsoft Bulletin MS11-010. OpenVAS Vulnerability Test $Id: secpodms11-010.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2476687 Authors: Sooraj KS Copyright: Copyright ...

EMC Replication Manager Command Execution

This module exploits a remote command-injection vulnerability in EMC Replication Manager client irccd.exe. By sending a specially crafted message invoking RunProgram function an attacker may be able to execute arbitrary commands with SYSTEM privileges. Affected products are EMC Replication Manage...

Novell ZENworks Handheld Management ZfHIPCND.exe Crafted TCP Request Remote Overflow

According to its build date, the version of the ZENworks Handheld Management Access Point process ZfHIPCND.exe on the remote host is affected by a buffer overflow vulnerability due to a failure to accommodate variable-sized data during initialization of a buffer. By default, this process listens ...

TELUS Security Labs VR - Symantec Alert Management System HNDLRSVC Arbitrary Command Execution

Symantec Alert Management System HNDLRSVC Arbitrary Command Execution TSL ID: FSC20100727-01 1. Affected Software Symantec Antivirus Corporate Edition 10.1.8.8000 and possibly prior Symantec System Center 10.1.8.8000 and possibly prior Reference:...

Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)

This host is missing a critical security update according to Microsoft Bulletin MS07-021. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)

This host is missing a critical security update according to Microsoft Bulletin MS07-021. OpenVAS Vulnerability Test $Id: gbms07-021.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability 930178 Authors: Madhuri D Copyright:...

CA ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc

Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server, which listens for incoming connections on port 8014,...

CA ARCserve D2D r15 - Web Service Servlet Code Execution

CA ARCserve D2D r15 - Web Service Servlet Code Execution Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server...

Remote Code Execution in DiskPulse Server

A stack overflow vulnerability exists in the DiskPulse Server installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server with SYSTEM privileges. Note that Nessus checked for this...

Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

This host is installed with Novell ZENworks Handheld Management and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellzhmbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability Authors: Soora...

Exploit Code Out For New Windows Kernel Flaw

Security experts are warning about a newly discovered local privilege escalation bug in the Windows kernel that affects most of the current versions of the operating system, including Vista and Windows 7. The new Windows kernel bug is considered a critical vulnerability, even though it can’t be...

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

Overview Microsoft Windows does not adequately validate registry data read using the function RtlQueryRegistryValues. By modifying an EUDC registry key value, a local user could execute arbitrary code with SYSTEM privileges. Description Microsoft Windows supports end-user-defined characters EUDC ...

Juniper VPN client rdesktop clickhack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

Apple Releases iOS 4.2

Apple has released iOS 4.2 for the iPhone, iPod Touch, and iPad to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, initiate a call, cause a denial-of-service condition, gain system privileges, or obtain sensitive information...