pam_captcha information leak

Behaviour is different depending on user account existance...

Microsoft Word Font Parsing Buffer Overflow (CVE-2005-0564)

Microsoft Word is a document authoring product released by the Microsoft Corporation. Its native file format is the Word Document. A Word Document has numerous properties which define the appearance of the document, text alignment, pictures and text font. The names of the fonts used in the docume...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Open Education System OES 0.1 beta allow remote attackers to execute arbitrary PHP code via a URL in the CONFINCLUDEPATH parameter to 1 forum/admin.php and 2 plotgraph/index.php in admin/modules/modules/, and 3 adminuser/modadmuser.php and 4...

CVE-2009-4849

Multiple cross-site request forgery CSRF vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to hijack the authentication of administrators for requests that 1 create a new user account via a save action to tvserver/user/user.do, 2 shutdown a...

FreeBSD : mediawiki -- authenticated CSRF vulnerability (694da5b4-5877-11df-8d80-0015587e2cc1)

A MediaWiki security announcement reports : MediaWiki was found to be vulnerable to login CSRF. An attacker who controls a user account on the target wiki can force the victim to log in as the attacker, via a script on an external website. If the wiki is configured to allow user scripts, say with...

Windows Media Services ConnectFunnel Stack Buffer Overflow

$Id: ms10025wmssconnectfunnel.rb 9101 2010-04-17 11:22:37Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Windows Media Services ConnectFunnel Stack Buffer Overflow

This module exploits a stack buffer overflow in the Windows Media Unicast Service version 4.1.0.3930 NUMS.exe. By sending a specially crafted FunnelConnect request, an attacker can execute arbitrary code under the "NetShowServices" user account. Windows Media Services 4.1 ships with Windows 2000...

mediawiki -- authenticated CSRF vulnerability

A MediaWiki security announcement reports: MediaWiki was found to be vulnerable to login CSRF. An attacker who controls a user account on the target wiki can force the victim to log in as the attacker, via a script on an external website. If the wiki is configured to allow user scripts, say with...

Serv-U < 9.4.0.0

According to its banner, the installed version of Serv-U is earlier than 9.4.0.0, and is, therefore, potentially affected by the following issues : - When importing users, restricted administrators could create user accounts outside their home directory. - When exporting users, restricted...

Debian DSA-1986-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in Moodle, an online course management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4297 Multiple cross-site request forgery CSRF vulnerabilities have been discovered. - CVE-2009-4298 It has be...

RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution

$Id: piranhapasswdexec.rb 8497 2010-02-14 20:27:24Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ASPCode CMS <= v1.5.8 Multiple Vulnerability

Exploit for unknown platform in category web applications ============================================ ASPCode CMS alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS"; http://host/default.asp?sec=1&ma2="alert"XSS"; XSS found also on Form to reset password:...

Debian: Security Advisory (DSA-1986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1986-1 moodle - several vulnerabilities

Bulletin has no description...

Read the config of the User Account Control feature over WMI

Read the config of the User Account Control feature over WMI. OpenVAS Vulnerability Test $Id: GSHBWMIUACconfig.nasl 8017 2017-12-07 06:46:46Z emoss $ Read the config of the User Account Control feature over WMI Windows Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Read the config of the User Account Control feature over WMI

Read the config of the User Account Control feature over WMI. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla MemoryBook 1.2 SQL Injection / RFI

SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found on View Events page Remote File...

Joomla! Component memorybook 1.2 - Multiple Vulnerabilities

SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found on View Events page Remote File...

Joomla Component MemoryBook 1.2 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Joomla Component MemoryBook 1.2 Multiple Vulnerabilities ======================================================== SQL Injection ------------- requires: magic quotes OFF, user account...

Joomla Component MemoryBook 1.2 Multiple Vulnerabilities

No description provided by source. SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found o...