ManageEngine Firewall Analyzer 5 XSRF/XSS Vulnerability

Exploit for unknown platform in category remote exploits ======================================================= ManageEngine Firewall Analyzer 5 XSRF/XSS Vulnerability ======================================================= Written By Michael Brooks Special thanks to str0ke! Product: ManageEngin...

ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery Cross-Site Scripting

ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery Cross-Site Scripting Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage:...

ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery / Cross-Site Scripting

Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage: http://fwanalyzer.com/ This is live exploit code against the online demo. Go ahead, run it! With...

Design/Logic Flaw

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id...

CVE-2008-5809

The CVE-2008-5809 affects futomi CGI Cafe’s Access Analyzer CGI: Standard v4.0.1 and earlier and Professional v4.11.3 and earlier, where a predictable session ID enables remote attackers to hijack sessions and view analysis results. Root cause: predictable session identifiers. Impact: partial dis...

Gentoo Security Advisory GLSA 200812-12 (honeyd)

The remote host is missing updates announced in advisory GLSA 200812-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Overview Access Analyzer CGI from futomi's CGI Cafe contains a predictable session ID vulnerability. Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a predictable session ID vulnerability. Impact A remote attacker could...

JVN#07468800 Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a predictable session ID vulnerability. Impact A remote attacker could impersonate an administrator of Access Analyzer CGI. As a result, a remote attacker could view access...

[SECURITY] Fedora 9 Update: awstats-6.8-3.fc9

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

[SECURITY] Fedora 10 Update: awstats-6.8-3.fc10

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

[SECURITY] Fedora 8 Update: awstats-6.8-3.fc8

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

[SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1679-1 [email protected] http://www.debian.org/security/ Florian Weimer December 03, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1673-1 (wireshark)

The remote host is missing an update to wireshark announced via advisory DSA 1673-1. OpenVAS Vulnerability Test $Id: deb16731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1673-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1679-1 awstats - cross-site scripting

Bulletin has no description...

Debian DSA-1673-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in network traffic analyzer Wireshark. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3137 The GSM SMS dissector is vulnerable to denial of service. - CVE-2008-3138 The PANA and KISMET dissectors...

DSA-1673-1 wireshark - several vulnerabilities

Bulletin has no description...

Fresh Email Script 1.0 Multiple Remote Vulnerabilities

No description provided by source. 1. +-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5. +-----------------founde...

ESET SysInspector 'esiadrv.sys'本地特权提升漏洞

BUGTRAQ ID:31521 CNCAN ID：CNCAN-2008100303 ESET SysInspector是一款类似于Hijackthis的分析工具。 ESET SysInspector处理IOCTL请求存在问题，本地攻击者可以利用漏洞以内核特权执行任意代码。 esiadrv.sys 3.0.65535.0设备驱动IOCTL处理代码存在问题，由于不正确验证用户提供传递给IOCTLs的地址。所有IOCTLs以METHODNEITHER方式生成。由于设备驱动由GUI动态装载和卸载。 Eset SysInspector 1.1.1 目前没有解决方案提供：...

CVE-2008-4451

The SysInspector AntiStealth driver esiasdrv.sys 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHODNEITHER IOCTL request to \Device\esiasdrv that overwrites a pointer...