412 matches found
[OWASP Zed Attack Proxy 2.1.0] An easy to use integrated penetration testing tool for finding vulnerabilities in web applications
The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration...
Oracle Linux 5 : mysql (ELSA-2010-0442)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0442 advisory. 5.0.77-4.3 - Add fixes for CVE-2010-1626, CVE-2010-1848, CVE-2010-1850 Tenable has extracted the preceding description block directly from the Oracle...
Oracle / Sun / MySQL / PeopleSoft multiple applications security vulnerabilities
128 vulnerabilities in different application...
Free Hosting Manager 'id' Parameter SQLi Vulnerability
Free Hosting Manager is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
IBM Rational AppScan 8.x/7.x 多个安全漏洞
CVE ID:...
Travelon Express CMS 6.2.2 - Multiple Vulnerabilities
Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Date: ===== 2012-05-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=530 VL-ID: ===== 530 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: =============...
Joomla! 'com_kp' Component LFI Vulnerability (Jan 2012) - Active Check
The SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; if description scriptoid"1.3.6.1.4.1.25623.1.0.103398";...
appRain CMF 'uploadify.php' Remote Arbitrary File Upload Vulnerability
appRain CMF is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
HP Managed Printing Administration Multiple Vulnerabilities
This host is installed with HP Managed Printing Administration and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhpmanagedprintingadminmultvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ HP Managed Printing Administration Multiple Vulnerabilities Authors: Rachana Shetty...
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...
Session Race Conditions and Session Puzzling – Now Simplified
Session Race Conditions and Session Puzzling – Now Simplified A few months ago Shay Chen , Senior Manager at Hacktics Advanced Security Center HASC published a paper about Session Puzzling , a new application level attack vector of critical severity and numerous uses, but for some bizarre reasons...
HESK Multiple Cross Site Scripting Vulnerabilities
HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. OpenVAS Vulnerability Test $Id: gbhesk49008.nasl 7006 2017-08-25 11:51:20Z teissa $ HESK Multiple Cross Site Scripting Vulnerabilities Authors: Michael Meyer Copyright:...
eFront <= 3.6.9 Build 11018 Multiple Vulnerabilities
eFront is prone to cross-site scripting XSS and local file inclusion LFI vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Security Threats Increasing in Sophistication and Precision
IBM’s X-Force 2010 Trend and Risk report showed that as vulnerability disclosures hit their highest level ever in 2010, security threats continued to increase in sophistication and precision. Like the term or not, 2010 may well have been the year of the APT, the term has become familiar to nearly...
wodWebServer.NET <= 1.3.3 Directory Traversal Vulnerability - Active Check
A directory traversal vulnerability in wodWebServer.NET can be exploited to read files outside of the web root. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
TinyWebGallery Cross Site Scripting and Local File Include Vulnerabilities
TinyWebGallery is prone to local file-include and cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Web Crawler : Web Application Crawler - New Release
Web Crawler is a open source application that is based on the WebEngine library. WebEngine is the set of tools for performing black-box web-sites testing and other similar tasks. It provides tools means for reception of documents from a web-server, parse HTML pages, their comparisons, search...
WeBid Multiple Input Validation Vulnerabilities
WeBid is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a local file-include vulnerability and a cross-site-scripting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions migh...
Firm Finds Gaping Holes in Mobile Payments Applications
eBay’s PayPal online payment division is rushing a software patch to users of its iPhone mobile payments application to plug a hole that leaves users vulnerable to man-in-the-middle and phishing attacks, but the firm that found that hole said transaction security is just one problem facing the...