Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 12th January 2010 The packages list in this erratum has been updated to include...

JBS v2.0 | JBSX - Administration panel bypass and Malicious File Upload Vulnerability

No description provided by source. Administration panel bypass and Malicious File Upload Vulnerability JBS v2.0 JBSX and other Jiro's Products Google Dork: "inurl:/files/redirect.asp" Go to url files/login.asp admin 'or' '=' password 'or' '=' H4ckers may upload malicious files by using upload pan...

JBS v2.0 | JBSX - Administration panel bypass and Malicious File Upload

Exploit for unknown platform in category web applications ===================================================================================== JBS v2.0 | JBSX - Administration panel bypass and Malicious File Upload Vulnerability...

HP Power Manager Administration Universal Buffer Overflow

!/usr/bin/python HP Power Manager Administration Universal Buffer Overflow Exploit CVE 2009-2685 Tested on Win2k3 Ent SP2 English, Win XP Sp2 English Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 07/11/2009 ryujin@bt:$ ./hppowermanager.py...

JBS 2.0 JBSX - Administration Panel Bypass Arbitrary File Upload

JBS 2.0 JBSX - Administration Panel Bypass Arbitrary File Upload Administration panel bypass and Malicious File Upload Vulnerability JBS v2.0 JBSX and other Jiro's Products Google Dork: "inurl:/files/redirect.asp" Go to url files/login.asp admin 'or' '=' password 'or' '=' H4ckers may upload...

JBS 2.0 / JBSX - Administration Panel Bypass / Arbitrary File Upload

Administration panel bypass and Malicious File Upload Vulnerability JBS v2.0 JBSX and other Jiro's Products Google Dork: "inurl:/files/redirect.asp" Go to url files/login.asp admin 'or' '=' password 'or' '=' H4ckers may upload malicious files by using upload panel as they have administrator acces...

Hewlett-Packard (HP) Power Manager Administration Power Manager Administration - Universal Buffer Overflow

Hewlett-Packard HP Power Manager Administration Power Manager Administration - Universal Buffer Overflow !/usr/bin/python HP Power Manager Administration Universal Buffer Overflow Exploit CVE 2009-2685 Tested on Win2k3 Ent SP2 English, Win XP Sp2 English Matteo Memelli ryujin A-T...

Lotus Domino Console Detection

The Lotus Domino console is running on this port. A dedicated client software uses this console port to reconfigure the Domino server. Credentials are needed for that operation. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42818; scriptversion"1.8";...

HP Power Manager Administration Universal Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= HP Power Manager Administration Universal Buffer Overflow Exploit ================================================================= Title: HP Power Manager Administration...

Oracle Database Server ctxsys.driload Access Validation (CVE-2004-0637)

Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...

Hewlett-Packard Procurve switches crossite scripting

Crossite scriptign in web administration interface...

SA-CONTRIB-2009-099 - RootCandy Theme - Cross Site Scripting

RootCandy is a theme specifically designed for use in the administration section. The theme fails to sanitize a URL value, leading to a Cross Site Scripting XSS vulnerability. Versions affected RootCandy theme for Drupal 6.x prior to RootCandy 6.x-1.5 Drupal core is not affected. If you do not us...

Design/Logic Flaw

An administration page in the NGP COO/CWP Integration crmngp module 6.x before 6.x-1.12 for Drupal does not perform the expected access control, which allows remote attackers to read log information via unspecified vectors...

CVE-2009-3920

An administration page in the NGP COO/CWP Integration crmngp module 6.x before 6.x-1.12 for Drupal does not perform the expected access control, which allows remote attackers to read log information via unspecified vectors...

HP Power Manager Remote Code Execution

Added: 11/06/2009 CVE: CVE-2009-2685 BID: 36933 OSVDB: 59684 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A stack-based buffer overflow in the HP Power Manager management web server allows...

Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Power Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of URL parameters when posting to the login form of the web bas...

Hewlett-Packard Power Manager Administration Buffer Overflow

This module exploits a stack buffer overflow in Hewlett-Packard Power Manager 4.2. Sending a specially crafted POST request with an overly long Login string, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/http/hp/powermanagerlogin msf...

Sun Solaris sadmind adm_build_path() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sun Solaris...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML via 1 the scheduler title in the scheduler module, and the 2 atksearchcontractnumber, 3 atksearchAEcustomercustomer, 4 atksearchmodecontracttype, and possibly 5...

CVE-2009-2733

Multiple cross-site scripting XSS vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML via 1 the scheduler title in the scheduler module, and the 2 atksearchcontractnumber, 3 atksearchAEcustomercustomer, 4 atksearchmodecontracttype, and possibly 5...