1887 matches found
MiniTwitter 0.2b Remote User Options Changer Exploit
No description provided by source. !-- || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------...
WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit-->
!/usr/bin/perl --------------------------------------------------------- WysGui CMS 1.2 BETAcookie BSQL --------------------------------------------------------- CMS INFORMATION: --WEB: http://wysgui.com/ --DOWNLOAD: http://sourceforge.net/projects/wysgui/ --DEMO: http://wysgui.com/demo/...
CLAN TIGER CMS--AUTH BYPASS LOGIN FORM (SQL INJECTION)-->
----------------------------------------------------------- CLAN TIGER CMS AUTH BYPASS LOGIN FORM SQL INJECTION ----------------------------------------------------------- CMS INFORMATION: --WEB: http://www.clantiger.com --DOWNLOAD: http://www.clantiger.com/download-clan-cms --DEMO:...
7-Zip Unspecified Archive Handling Vulnerability (Windows)
This host is installed with 7zip and is prone to Unspecified vulnerability. OpenVAS Vulnerability Test $Id: gb7ziparchivehandlingvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ 7-Zip Unspecified Archive Handling Vulnerability Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...
[oCERT-2008-015] glib and glib-predecessor heap overflows
2008-015 glib and glib-predecessors heap overflows Description: Base64 encoding and decoding functions in glib suffer from vulnerabilities during memory allocation which may result in arbitrary code execution when processing large strings. A number of other GNOME-related applications which predat...
Mandrake Security Advisory MDVSA-2009:062 (shadow-utils)
The remote host is missing an update to shadow-utils announced via advisory MDVSA-2009:062. OpenVAS Vulnerability Test $Id: mdksa2009062.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:062 shadow-utils Authors: Thomas Reinke Copyright: Copyright c 20...
Fedora Update for openoffice.org FEDORA-2007-376
Check for the Version of openoffice.org OpenVAS Vulnerability Test Fedora Update for openoffice.org FEDORA-2007-376 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandrake Security Advisory MDVSA-2009:027 (cups)
The remote host is missing an update to cups announced via advisory MDVSA-2009:027. OpenVAS Vulnerability Test $Id: mdksa2009027.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:027 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Opera Stored Cross Site Scripting Vulnerability
====================================================== ================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...
[oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS)
2008-012 Horde, Popoon frameworks common input sanitization errors XSS Two cross-site scripting XSS vulnerabilities were reported in Horde Framework. The first of which is that the Horde framework fails to properly sanitize the filename of MIME attachments on received emails. The second...
Novell eDirectory Multiple Vulnerabilities - Linux
Novell eDirectory is prone to cross-site scripting XSS, denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Opera Web Browser Multiple Security Vulnerabilities Aug-08 (Windows)
The remote host is running Opera Web Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnaug08win900038.nasl 5375 2017-02-20 16:39:23Z cfi $ Description: Opera Web Browser Multiple Security Vulnerabilities Aug-08 Windows Authors: Chandan S...
RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability
The host is running RhinoSoft Serv-U SFTP, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodrhinosoftserv-usftpdosvuln900113.nasl 5375 2017-02-20 16:39:23Z cfi $ Description: RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability Authors: Sharath S...
QT-cute QuickTalk Guestbook 1.6 - Multiple Cross-Site Scripting Vulnerabilities
QT-cute QuickTalk Guestbook 1.6 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29013/info QT-cute QuickTalk Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Call of Duty 4 1.5 - stats Denial of Service
Call of Duty 4 1.5 - stats Denial of Service source: https://www.securityfocus.com/bid/29026/info Call of Duty is prone to a denial-of-service vulnerability because the application fails to handle specially crafted commands. An attacker can exploit this issue to crash the affected application,...
Web Server Creator 0.1 - langfile Remote File Inclusion
Web Server Creator 0.1 - langfile Remote File Inclusion source: https://www.securityfocus.com/bid/28631/info Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise t...
Quick Classifieds 1.0 - controlcenterremember.php3?DOCUMENT_ROOT Remote File Inclusion
Quick Classifieds 1.0 - controlcenterremember.php3?DOCUMENTROOT Remote File Inclusion source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...
SynCE 0.92 - vdccm Daemon Remote Command Injection
SynCE 0.92 - vdccm Daemon Remote Command Injection source: https://www.securityfocus.com/bid/27178/info SynCE is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary commands in th...
Galmeta Post 0.2 - Upload_Config.php Remote File Inclusion
Galmeta Post 0.2 - UploadConfig.php Remote File Inclusion source: https://www.securityfocus.com/bid/26329/info Galmeta Post is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...
Apache Tomcat fails to properly handle cookies containing single quotes
Overview Apache Tomcat fails to properly handle cookies that contain a single quote, which may allow session hijacking. Description Apache Tomcat is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat incorrectly treats a single quote as a cookie delimiter...