11074 matches found
Dogfood CRM spell.php Remote Command Execution
This module exploits a previously unpublished vulnerability in the Dogfood CRM mail function which is vulnerable to command injection in the spell check feature. Because of character restrictions, this exploit works best with the double-reverse telnet payload. This vulnerability was discovered by...
Null pointer dereference
Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a feeds: URI beginning with a 1 % percent, 2 open curly bracket, 3 close curly bracket, 4 ^ caret, 5 backquote, or 6 | pipe character, followed by an & ampersan...
CentOS Update for lynx CESA-2008:0965 centos3 x86_64
Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Apple Safari畸形feeds: URI空指针引用拒绝服务漏洞
BUGTRAQ ID: 33909 Safari是苹果家族操作系统中默认捆绑的WEB浏览器。 Apple Safari没有充分地过滤feeds: URI中所提供的用户输入，如果用户受骗跟随了恶意链接，就会触发空指针引用，导致Safari进程崩溃。 Apple Safari 4 Beta 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com feeds:%&www.rec-sec.com/feed/ feeds:&www.rec-sec.com/feed/...
CentOS Update for lynx CESA-2008:0965 centos3 i386
Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
CVE-2009-0541
Multiple cross-site scripting XSS vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username field in an admin/ request to index.php, possibly related to the loginusername parameter and the app/code/core/Mage/Admin/Model/Session.p...
Apple Safari 4 Beta feeds: Denial Of Service
Apple Safari 4 Beta feeds: URI NULL Pointer Dereference Denial of Service Vulnerability Date: Feb 25 2009 Class: Input Validation Error Local: Yes Remote: Yes Vulnerable Versions: Apple Safari 4 528.16 Public Beta Note: MacOS X versions not tested. Description: Apple Safari is prone to a...
Apple Safari 4 - feeds: URI Null Pointer Dereference Remote Denial of Service
Apple Safari 4 - feeds: URI Null Pointer Dereference Remote Denial of Service source: https://www.securityfocus.com/bid/33909/info Apple Safari is prone to a denial-of-service vulnerability that stems from a NULL-pointer dereference. Attackers can exploit this issue to crash the affected...
Apple Safari 4 - 'feeds:' URI Null Pointer Dereference Remote Denial of Service
source: https://www.securityfocus.com/bid/33909/info Apple Safari is prone to a denial-of-service vulnerability that stems from a NULL-pointer dereference. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Apple Safari 4 Beta is vulnerable;...
Directory traversal
Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by reading the vynetman.cfg file that contains passwords...
Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit
Summary Got All Media is a Home theater PC application for Microsoft Windows platforms. Description Got All Media is exposed to a remote denial of service issue when processing URI requests. This issue occurs when the application handles an HTTP GET request over TCP port 5550. !/usr/local/bin/per...
Mozilla Firefox Multiple Vulnerabilities Feb-09 (Linux)
The host is installed with Mozilla Firefox browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulnfeb09lin.nasl 5055 2017-01-20 14:08:39Z teissa $ Mozilla Firefox Multiple Vulnerabilities Feb-09 Linux Authors: Sharath S Copyright: Copyright c 2009...
Fedora Update for libxml2 FEDORA-2008-8575
Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2008-8575 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for libxml2 FEDORA-2008-7395
Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2008-7395 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for libxml2 FEDORA-2008-0462
Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2008-0462 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2009-0526
Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...
CVE-2009-0526
Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...
CVE-2009-0466
Cross-site scripting XSS vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response...
Sql injection
Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...