Anfibia Remote Command Execution

Exploit Title: Anfibia Remote Command Execution RCE Vulnerability Date: 2012-02-03 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.anfibia.com.br/ Dork: intext:"/op1.txt" "command" filetype:php Tested on: ubuntu 11.04 CVE : -...

Successful Shell Attack Detected - Unix 'wget' File Download

Binary data 6162.prm...

Successful Shell Attack Detected - Unix Failed 'wget' Command

Binary data 6134.prm...

GLSA-201110-10 : Wget: User-assisted file creation or overwrite

The remote host is affected by the vulnerability described in GLSA-201110-10 Wget: User-assisted file creation or overwrite It was discovered that Wget was unsafely trusting server-provided filenames. This allowed attackers to overwrite or create files on the user's system by sending a redirect...

Wget: User-assisted file creation or overwrite

Background GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols. Description It was discovered that Wget was unsafely trusting server-provided filenames. This allowed attackers to overwrite or create files on the user's system...

CentOS Update for wget CESA-2009:1549 centos4 i386

Check for the Version of wget OpenVAS Vulnerability Test CentOS Update for wget CESA-2009:1549 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for wget CESA-2009:1549 centos5 i386

Check for the Version of wget OpenVAS Vulnerability Test CentOS Update for wget CESA-2009:1549 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for wget CESA-2009:1549 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for wget CESA-2009:1549 centos3 i386

Check for the Version of wget OpenVAS Vulnerability Test CentOS Update for wget CESA-2009:1549 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for wget CESA-2009:1549 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for wget CESA-2009:1549 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

DEBIAN-CVE-2010-2246

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...

SAP Management Console OSExecute Payload Execution

This module executes an arbitrary payload through the SAP Management Console SOAP Interface. A valid username and password for the SAP Management Console must be provided. This module has been tested successfully on both Windows and Linux platforms running SAP Netweaver. In order to exploit a Lin...

FreeBSD Ports: wget, wget-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID d754b7d2-b6a7-11df-826c-e464a695cb21 OpenVAS Vulnerability Test $ Description: Auto generated from VID d754b7d2-b6a7-11df-826c-e464a695cb21 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Ubuntu Update for wget vulnerability USN-982-1

Ubuntu Update for Linux kernel vulnerabilities USN-982-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9821.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for wget vulnerability USN-982-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mandriva Update for wget MDVSA-2010:170 (wget)

Check for the Version of wget OpenVAS Vulnerability Test Mandriva Update for wget MDVSA-2010:170 wget Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu: Security Advisory (USN-982-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for wget MDVSA-2010:170 (wget)

Check for the Version of wget OpenVAS Vulnerability Test Mandriva Update for wget MDVSA-2010:170 wget Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

FreeBSD : wget -- multiple HTTP client download filename vulnerability (d754b7d2-b6a7-11df-826c-e464a695cb21)

GNU Wget version 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : wget vulnerability (USN-982-1)

It was discovered that Wget would use filenames provided by the server when following 3xx redirects. If a user or automated system were tricked into downloading a file from a malicious site, a remote attacker could create the file with an arbitrary name e.g. .wgetrc, and possibly run arbitrary...