VMware Security Updates for vCenter Server (VMSA-2013-0012)

VMware has updated vCenter Server to address multiple security vulnerabilities. OpenVAS Vulnerability Test $Id: gbvcenterVMSA-2013-0012.nasl 6663 2017-07-11 09:58:05Z teissa $ VMware Security Updates for vCenter Server VMSA-2013-0012 Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone...

WordPress NOSpamPTI Plugin SQLi Vulnerability - Active Check

The WordPress plugin Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Wordpress NOSpamPTI Plugin - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications NOSpamPTI Wordpress plugin Blind SQL Injection Vendor product description NOSpamPTI eliminates the spam in your comment box so strong and free, developed from the idea of Nando Vieira http://bit.ly/d38gB8, but some themes do not support change...

Mozilla Firefox Multiple Vulnerabilities - August 13 (Mac OS X)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvulnaug13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Mozilla Firefox Multiple Vulnerabilities - August 13 Mac OS X Authors: Thanga Prakash S Copyright:...

Comodo Internet Security Race Condition Vulnerability-02

The host is installed with Comodo Internet Security and is prone to race condition vulnerability. OpenVAS Vulnerability Test $Id: gbcomodoracecondvuln02win.nasl 6074 2017-05-05 09:03:14Z teissa $ Comodo Internet Security Race Condition Vulnerability-02 Authors: Arun Kallavi Copyright: Copyright c...

SynConnect PMS - SQL Injection Vulnerability

Exploit for php platform in category web applications Synchroweb Technology is a provider of application software, hardware and other innovative enterprise technology. They strive in development, deployment, and management of Linux and open source solutions for Internet infrastructure ranging fro...

Cisco Video Surveillance Operations Manager Multiple Vulnerabilities (cisco-sa-20130724-vsm) - Active Check

Cisco Video Surveillance Operations Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RubyGems fastreader - entry_controller.rb Remote Command Execution

RubyGems fastreader - entrycontroller.rb Remote Command Execution source: https://www.securityfocus.com/bid/58450/info fastreader is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to...

DataLife Engine 9.7 - 'preview.php' PHP Code Injection

------------------------------------------------------------------ DataLife Engine 9.7 preview.php PHP Code Injection Vulnerability ------------------------------------------------------------------ - Software Link: http://dleviet.com/ - Affected Version: 9.7 only. - Vulnerability Description: Th...

Advantech Studio 'NTWebServer.exe' Directory Traversal Vulnerability - Active Check

Advantech Studio is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Measuresoft ScadaPro Multiple Security Vulnerabilities

Measuresoft ScadaPro SCADA Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ViArt Shop Enterprise 4.1 Arbitrary Command Executio

?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you need to run a successful on-line...

Shockwave Player <= 11.6.5.635 Multiple Memory Corruption Vulnerabilities (APSB12-17)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.6.5.635 or earlier and is, therefore, potentially affected by multiple unspecified memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into viewing a malicious Shockwav...

PolarisCMS Cross Site Scripting

PolarisCMS blog.aspx Remote URI Based Cross-Site Scripting Vulnerability Vendor: PolarisCMS Product web page: http://www.polariscms.com Affected version: 2012 Summary: PolarisCMS is a White Label CMS content management System providing more features, functions and flexibility to global web...

phpAcounts v. 0. 5. 3 SQL injection and fix-vulnerability warning-the black bar safety net

Author: loneferret Affected version: 0.5.3 Developer address: http://phpaccounts.com/ Test platform: Ubuntu Server 11.10 Old app, still fun. Auth. Bypass: http://www.xxx.com /phpaccounts/index.php Username: x' or '1'='1' Password: whatever Upload php shell in preferences Letterhead image upload...

Fork CMS 3.2.7 Multiple HTML Code Injection Vulnerabilities

Summary Fork is an open source cms that will rock your world. Description Fork CMS suffers from multiple XSS vulnerabilities when parsing user input to several parameters in different scripts, via POST and GET methods. Attackers can exploit these weaknesses to execute arbitrary HTML and script co...

BASE 'base_qry_main.php' SQLi Vulnerability

BASE is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Clipbucket 2.6 - 'search_result.php?query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

Fedora Update for wireshark FEDORA-2011-15338

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2011-15338 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

ARASTAR SQL Injection Vulnerability

Exploit for php platform in category web applications ++ |o ID | ++ + Title : ARASTAR SQL Injection Vulnerability + Affected Version : ALL VERSIONS + Software Link : http://ara-star.com/art.php?ID=172 + Tested on : Windows XP SP2 + Date : 18/11/2011 + Dork : inurl:'.co.il/Cat.php?ID='...