JBoss JMX - Console Deployer Upload and Execute (Metasploit)

$Id: jbossmaindeployer.rb 10754 2010-10-19 22:24:33Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Visual Basic - '.VBP' Local Buffer Overflow (Metasploit)

$Id: msvisualbasicvbp.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Basic Web Server 1.0 Directory Traversal

------------------------------------------------------------------------ Software................Basic Web Server 1.0 Vulnerability...........Directory Traversal Download................http://www.bit4free.com/ Release Date............9/19/2010 Tested On...............Windows XP...

CVE-2010-2731

Unspecified vulnerability in Microsoft Internet Information Services IIS 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended access restrictions and execute ASP files via a crafted request, aka "Directory Authentication Bypass...

Microsoft IIS Directory Authentication Bypass (MS10-065; CVE-2010-1899; CVE-2010-2731)

IIS is a collection of Internet services packaged with several versions of the Windows operating system. An elevation of privilege vulnerability has been reported in Microsoft Internet Information Services IIS. The vulnerability is due to the way IIS parses specially crafted URLs. An attacker may...

PT-2010-1179 · Microsoft · Sql Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2003 SP3, 2007 SP2 and SP3, 2010 SP1 Microsoft SQL Server versions 2000 SP4, 2005 SP4, 2008 SP2, SP3, R2, R2 SP1, and R2 SP2 Microsoft Commerce Server versions 2002 SP4, 2007 SP2, 2009 Gold and R2 Microsoft Host...

tomcat: information disclosure in authentication headers

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires 1 BASIC or 2 DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the rep...

Fedora Update for mono-basic FEDORA-2010-10332

Check for the Version of mono-basic OpenVAS Vulnerability Test Fedora Update for mono-basic FEDORA-2010-10332 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for mono-basic FEDORA-2010-10332

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 13 Update: mono-basic-2.6.2-1.fc13

This package contains the Visual Basic .NET compiler and language runtime. This allows you to compile and run VB.NET application and assemblies...

dotDefender 3.8-5 - Remote Code Execution (via Cross-Site Scripting)

/ DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command Execution Vulnerability: http://www.exploit-db.com/exploits/10261...

dotDefender 3.8-5 - Remote Code Execution (via Cross-Site Scripting)

dotDefender 3.8-5 - Remote Code Execution via Cross-Site Scripting / DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command...

Splunk Web Detection

The web interface for Splunk is running on the remote host. Splunk is a search, monitoring, and reporting tool for system administrators. Note that HTTP Basic Authentication credentials may be required to retrieve version information for some recent Splunk releases. TRUSTED...

Microsoft Visual Basic Document Properties Buffer Overrun (MS06-047; CVE-2006-3649)

Microsoft Visual Basic for Applications VBA is an implementation of Microsoft's Visual Basic which is built into all Microsoft Office applications, as well as some other Microsoft applications, such as Microsoft Visio and Microsoft Works Suite. Visual Basic VB is an event driven programming and...

CVE-2010-1522

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...

Sql injection

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...

CVE-2010-1522

The CVE-2010-1522 issue affects BookLibrary Basic (com_booklibrary) for Joomla! 1.5.3, where multiple SQL injections are possible via user-supplied parameters in index.php. The root cause is improper sanitization of inputs in five vectors: bid[] in lend_request/save_lend_request, id in mdownload/...

CVE-2010-1522

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...

CVE-2010-1522: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...

Openwsman HTTP Basic Authentication Buffer Overflow (CVE-2008-2234)

Openwsman is an implementation of Web Services Management WS-Management specification. It uses the WS-Management protocol, which is a SOAP-based protocol using HTTP for exchange of information related to management of devices and applications in a platform independent manner. There exists a stack...