Lucene search
+L

3306 matches found

Tenable Nessus
Tenable Nessus
added 2009/02/13 12:0 a.m.44 views

Mac OS X Multiple Vulnerabilities (Security Update 2009-001)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-001 applied. This security update contains fixes for the following products : - AFP Server - Apple Pixlet Video - CarbonCore - CFNetwork - Certificate Assistant - ClamAV - CoreText - CUPS - DS...

10CVSS7.1AI score0.22621EPSS
SaveExploits34References49
securityvulns
securityvulns
added 2009/02/05 12:0 a.m.65 views

[security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01662367 Version: 1 HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service DoS and Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon ...

10CVSS0.5AI score0.07425EPSS
SaveExploits0
Prion
Prion
added 2008/12/15 6:0 p.m.20 views

Sql injection

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

7.5CVSS9AI score0.02373EPSS
SaveExploits2References6Affected Software1
NVD
NVD
added 2008/12/15 6:0 p.m.16 views

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

5CVSS6.3AI score0.07386EPSS
SaveExploits1References5
NVD
NVD
added 2008/12/15 6:0 p.m.18 views

CVE-2008-5571

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

7.5CVSS8.3AI score0.02373EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2008/12/15 5:45 p.m.28 views

CVE-2008-5571

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

8.3AI score0.02373EPSS
SaveExploits2References6
CVE
CVE
added 2008/12/15 5:45 p.m.46 views

CVE-2008-5571

CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...

7.5CVSS8.4AI score0.02373EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2008/12/15 5:45 p.m.20 views

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

6.3AI score0.07386EPSS
SaveExploits1References5
securityvulns
securityvulns
added 2008/12/14 12:0 a.m.58 views

[security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01623009 Version: 1 HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

7.8CVSS0.3AI score0.02945EPSS
SaveExploits0
exploitpack
exploitpack
added 2008/12/09 12:0 a.m.15 views

Professional Download Assistant 0.1 - Authentication Bypass

Professional Download Assistant 0.1 - Authentication Bypass Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/12/09 12:0 a.m.24 views

Professional Download Assistant 0.1 SQL Injection

Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/12/09 12:0 a.m.24 views

Professional Download Assistant Database Disclosure

Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download Assistant Download :...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2008/12/09 12:0 a.m.20 views

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

No description provided by source. Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK,...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/12/09 12:0 a.m.19 views

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ==================================================================== Professional Download Assistant 0.1 Auth Bypass SQL Injection Vuln ==================================================================== Professional Download Assistant 0....

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/12/08 12:0 a.m.19 views

Professional Download Assistant 0.1 Database Disclosure Vulnerability

No description provided by source. Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/12/07 12:0 a.m.23 views

Professional Download Assistant 0.1 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Professional Download Assistant 0.1 Database Disclosure Vulnerability ===================================================================== Professional Download Assista...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/12/07 12:0 a.m.11 views

Professional Download Assistant 0.1 - Database Disclosure

Professional Download Assistant 0.1 - Database Disclosure Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script :...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/12/07 12:0 a.m.29 views

Professional Download Assistant 0.1 - Database Disclosure

Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download Assistant Download :...

5CVSS5.8AI score0.07386EPSS
SaveExploits1
securityvulns
securityvulns
added 2008/09/02 12:0 a.m.65 views

HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting (XSS) or Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01532861 Version: 1 HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting XSS or Remote Denial of Service DoS NOTICE: The information in th...

10CVSS0.4AI score0.06643EPSS
SaveExploits5
xssed
xssed
added 2008/05/23 12:0 a.m.9 views

Unfixed XSS vulnerability at www.propertybangalore.co.in

Security researcher rhys, has submitted on 23/05/2008 a cross-site-scripting XSS vulnerability affecting www.propertybangalore.co.in, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

SaveExploits0References1
Rows per page
Query Builder