Dell IT Assistant ActiveX information leakage

readRegVal allows registry values access...

Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal() Remote Registry Dump Vulnerability

!-- Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability download uri: ftp://ftp.us.dell.com/sysman/OM-ITAssistant-Dell-Web-WIN-6.5.0-2247A01.21.exe ActiveX settings: CLSID: 6286EF1A-B56E-48EF-90C3-743410657F3C ProgID:...

Dell IT Assistant detectIESettingsForITA.ocx Remote Registry Dump

x = obj.readRegVal"HKLM","HARDWARE\DE...

Microsoft Internet Explorer VML内存破坏CVE-2011-1266远程代码执行漏洞

Bugtraq ID: 48173 CVE ID：CVE-2011-1266 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 从DOM解析VML对象时vgx.dll存在缺陷，具体来说，在页面结构过程中处理Imagedata参数时存在故障代码。通过向imagedata对象动态分配属性，进程会访问释放内存，成功利用漏洞可以应用程序上下文执行任意代码 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 8.0.7600.16385 Microsoft Internet...

Vmware vSphere Management Assistant (vMA) - Local Privilege Escalation

======================================================================= Vmware vSphere Management Assistant vMA - Local Privilege Escalation ======================================================================= Affected Software : Vmware vSphere Management Assistant vMA Severity : Medium...

Vmware vSphere Management Assistant (vMA) Privilege Escalation

======================================================================= Vmware vSphere Management Assistant vMA - Local Privilege Escalation ======================================================================= Affected Software : Vmware vSphere Management Assistant vMA Severity : Medium...

Greenbone Security Assistant Cross-Site Request Forgery Vulnerability

This host is installed with Greenbone Security Assistant and is prone to cross-site request forgery vulnerability. OpenVAS Vulnerability Test $Id: gbgreenbonegsacsrfvuln.nasl 3112 2016-04-19 08:52:10Z antu123 $ Greenbone Security Assistant Cross-Site Request Forgery Vulnerability Authors: Antu...

Greenbone Security Assistant < 2.0.0 CSRF Vulnerability

Greenbone Security Assistant is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenVAS Manager Command Injection Vulnerability

Exploit for linux platform in category local exploits Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability allows privilege escalatio...

OpenVAS Manager - Command Injection

OpenVAS Manager - Command Injection Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this...

OpenVAS Manager - Command Injection

Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability allows privilege escalation...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0018

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

Cross site request forgery (csrf)

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0650

CVE-2011-0650 concerns Greenbone Security Assistant (GSA) prior to 2.0+rc3. The issue is a CSRF vulnerability that allows an attacker to hijack the user’s authenticated session to issue OMP requests to OpenVAS Manager (e.g., sending email). This is tied to exploitation of CVE-2011-0018 via the GS...

PT-2011-2528

Name of the Vulnerable Software and Affected Versions Greenbone Security Assistant versions prior to 2.0+rc3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that send email via an OMP request to OpenVAS Manager. This can be us...

CVE-2011-0018: Improper Input Validation

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

CVE-2011-0650: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...