8873 matches found
Virtualmin Symlink / XSS / More
Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website" featrue to hide hers real location and conduct attacks on...
Virtualmin < 3.703 Multiple Local/Remote Vulnerabilities
Exploit for linux platform in category remote exploits ======================================================== Virtualmin alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use...
Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities
Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website"...
Virtualmin < 3.703 - Multiple Local/Remote Vulnerabilities
Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website" featrue to hide hers real location and conduct attacks on...
WordPress - Privileges Unchecked in admin.php and Multiple Information
This WordPress vulnerability was found in the way that WordPress handles some URL requests. It results the content of plugins configuration pages in some plugins modifying plugin options, unprivileged users viewing and injecting JavaScript code. The code is abitrary and it may be run by a malicio...
FreeBSD IPv6 interface DoS
Unprivileged user can set options and disable interface...
Kloxo 5.75 (24 Issues) Multiple Remote Vulnerabilities
No description provided by source. Who : http://lxlabs.com What : kloxo "Kloxo Previously Lxadmin The most flexible software on this planet. From Kloxo HostInaBox, World's lightest and the most efficient webhosting platform, to Kloxo Enterprise, which can manage 100s of thousands of domains on...
Kloxo 5.75 Has 24 Vulnerabilities
Who : http://lxlabs.com What : kloxo "Kloxo Previously Lxadmin The most flexible software on this planet. From Kloxo HostInaBox, World's lightest and the most efficient webhosting platform, to Kloxo Enterprise, which can manage 100s of thousands of domains on hundreds of servers. Kloxo is a fully...
Kloxo 5.75 (24 Issues) Multiple Remote Vulnerabilities
Exploit for linux platform in category remote exploits ====================================================== Kloxo 5.75 24 Issues Multiple Remote Vulnerabilities ====================================================== What : kloxo "Kloxo Previously Lxadmin The most flexible software on this plane...
kloxo 5.75 - Multiple Vulnerabilities
kloxo 5.75 - Multiple Vulnerabilities Who : http://lxlabs.com What : kloxo "Kloxo Previously Lxadmin The most flexible software on this planet. From Kloxo HostInaBox, World's lightest and the most efficient webhosting platform, to Kloxo Enterprise, which can manage 100s of thousands of domains on...
kloxo 5.75 - Multiple Vulnerabilities
Who : http://lxlabs.com What : kloxo "Kloxo Previously Lxadmin The most flexible software on this planet. From Kloxo HostInaBox, World's lightest and the most efficient webhosting platform, to Kloxo Enterprise, which can manage 100s of thousands of domains on hundreds of servers. Kloxo is a fully...
Linux kernel minor signal handling vulnerability
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...
Java WebStart unprivileged local file and network access
Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors...
Oracle APEX 3.2 Unprivileged DB users can see APEX password hashes
Exploit for multiple platform in category local exploits ================================================================== Oracle APEX 3.2 Unprivileged DB users can see APEX password hashes ================================================================== Unprivileged DB users can see APEX...
Unprivileged DB users can see APEX password hashes
Name Unprivileged DB users can see APEX password hashes Systems Affected APEX 3.0 optional component of 11.1.0.7 installation Severity High Risk Category Password Disclosure Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com CVE CVE-2009-0981 Advisory 14...
Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes
Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Name Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Systems Affected APEX 3.0 optional...
RedHat Security Advisory RHSA-2009:0411
The remote host is missing updates announced in advisory RHSA-2009:0411. The device-mapper multipath packages provide tools to manage multipath devices by issuing instructions to the device-mapper multipath kernel module, and by managing the creation and removal of partitions for device-mapper...
POC - Sun Java System Acccess Manager & Identity Manager Users Enumeration
============================================================ Sun Java System Acccess Manager & Identity Manager Users Enumeration ============================================================ Affected Software: Sun Java System Access Server, OpenSSo Sun Java System Identity Manager Author: Marco...
Linux kernel minor signal handling vulnerability
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...
JBoss EAP unprivileged local xml file access
The request handler in JBossWS in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read...