PT-2013-67: Sensitive Information Disclosure in Serv-U File Server

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Serv-U File Server. This vulnerability allows an attacker to find out the system configuration and obtain users’ authentication information via Serv-U variables values. Exploitation...

PT-2013-68: Sensitive Information Disclosure in Serv-U File Server

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Serv-U File Server on Windows. The system does not consider that NTFS allows users to address files with extended syntax, while matching the requested resource URL with locations...

Debian Security Advisory DSA 2767-1 (proftpd-dfsg - denial of service)

Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...

Software Defense Series: Exploit mitigation and vulnerability detection

Software Defense is a broad topic requiring a multipronged approach including: - the processes and tooling associated with secure development that we try and encapsulate within the Microsoft SDL, - core OS countermeasures that make exploitation of a given vulnerability more difficult for an...

Debian Security Advisory DSA 2765-1 (davfs2 - privilege escalation)

Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation. OpenVAS Vulnerability Test $Id: deb2765.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2765-1 using nvtgen 1.0 Script version: 1....

Ajax File And Image Manager 1.1 Code Execution

----------------------------------------------------------- PT-2013-41 Positive Technologies Security Advisory Arbitrary Code Execution in Ajax File and Image Manager ----------------------------------------------------------- --- Vulnerable software Ajax File and Image Manager Version: 1.1 and...

Debian Security Advisory DSA 2593-1 (moin - several vulnerabilities)

It was discovered that missing input validation in the twikidraw and anywikidraw actions can result in the execution of arbitrary code. This security issue is being actively exploited. This update also addresses path traversal in AttachFile. OpenVAS Vulnerability Test $Id: deb25931.nasl 6611...

Debian Security Advisory DSA 2393-1 (bip - buffer overflow)

Julien Tinnes reported a buffer overflow in the Bip multiuser IRC proxy which may allow arbitrary code execution by remote users. The oldstable distribution lenny is not affected by this problem. OpenVAS Vulnerability Test $Id: deb23931.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...

Debian Security Advisory DSA 2587-1 (libcgi-pm-perl - HTTP header injection)

It was discovered that the CGI module for Perl does not filter LF characters in the Set-Cookie and P3P headers, potentially allowing attackers to inject HTTP headers. OpenVAS Vulnerability Test $Id: deb25871.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2587-1 using...

Debian Security Advisory DSA 2592-1 (elinks - programming error)

Marko Myllynen discovered that ELinks, a powerful text-mode browser, incorrectly delegates user credentials during GSS-Negotiate. OpenVAS Vulnerability Test $Id: deb25921.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2592-1 using nvtgen 1.0 Script version: 1.0 Author:...

Adobe Shockwave Player Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'freeFTPd 1.0.10 PASS Command SEH...

Debian Security Advisory DSA 2744-1 (tiff - several vulnerabilities)

Pedro Ribeiro and Huzaifa S. Sidhpurwala discovered multiple vulnerabilities in various tools shipped by the tiff library. Processing a malformed file may lead to denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2744.nasl 6611 2017-07-07 12:07:20Z cfischer ...

http-csrf NSE Script

This script detects Cross Site Request Forgeries CSRF vulnerabilities. It will try to detect them by checking each form if it contains an unpredictable token for each user. Without one an attacker may forge malicious requests. To recognize a token in a form, the script will iterate through the...

[Xenotix XSS Exploit Framework v4] Advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting XSS vulnerability detection and exploitation framework. It provides Zero False Positive scan results with its unique Triple Browser Engine Trident, WebKit, and Gecko embedded scanner. It is claimed to have the world’s 2nd...

PT-2013-48: CRLF Injection in Oracle Containers for J2EE

The specialists of the Positive Research center have detected a CRLF Injection vulnerability in Oracle Containers for J2EE. Oracle Containers for J2EE does not properly validate the values from the HTTP headers. An attacker can use a crafted malicious HTTP response and display arbitrary data to t...

Microsoft Unicode Scripts Processor Remote Code Execution Vulnerability (2850869)

This host is missing an critical security update according to Microsoft Bulletin MS13-060. OpenVAS Vulnerability Test $Id: secpodms13-060.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Unicode Scripts Processor Remote Code Execution Vulnerability 2850869 Authors: Antu Sanadi Copyright: Copyright ...

Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2859537)

This host is missing an important security update according to Microsoft Bulletin MS13-063. OpenVAS Vulnerability Test $Id: secpodms13-063.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel Privilege Elevation Vulnerabilities 2859537 Authors: Antu Sanadi Copyright: Copyright c 2013...

Mozilla Firefox Multiple Vulnerabilities - August 13 (Mac OS X)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvulnaug13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Mozilla Firefox Multiple Vulnerabilities - August 13 Mac OS X Authors: Thanga Prakash S Copyright:...

PT-2013-81: Cross-Site Request Forgery in Siemens SIMATIC S7-1500 CPU PLC

The specialists of the Positive Research center have detected a Cross-Site Request Forgery vulnerability in Siemens SIMATIC S7-1500 CPU PLC. The web server of the affected PLCs port 80/tcp and port 443/tcp might allow CSRF Cross-Site Request Forgery attacks, compromising integrity and availabilit...