OCS Inventory NG Server 1.2.1 SQL Injection

OCS Inventory NG Server 1.2.1 Details: The Open Computer and Software OCS Inventory Next Generation NG provides relevant inventory information about system configurations and software on the network. Download : http://www.ocsinventory-ng.org/index.php?page=1-02-1 Found by : Guilherme Marinheiro...

TinyBrowser (TinyMCE Editor File browser) 1.41.6 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================= TinyBrowser TinyMCE Editor File browser 1.41.6 Multiple Vulnerabilities =========================================================================...

TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities

TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities ============================================================================== TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities...

TinyBrowser 1.41.6 XSS / XSRF / Creation

============================================================================== TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilitis ============================================================================== Discovered by Aung Khant, YGN Ethical Hacker Group, Myanmar...

TinyBrowser (TinyMCE Editor File browser) 1.41.6 Multiple Vulnerabilities

No description provided by source. ============================================================================== TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities ============================================================================== Discovered by Aung Khant, YGN...

TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities

============================================================================== TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities ============================================================================== Discovered by Aung Khant, YGN Ethical Hacker Group, Myanmar...

CVE-2009-2334

wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as...

CVE-2009-2334

wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as...

[SECURITY] [DSA 1816-1] New apache2 packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1816-1 [email protected] http://www.debian.org/security/ Stefan Fritsch June 16, 2009 http://www.debian.org/security/faq -...

OCS Inventory NG 1.02 - Multiple SQL Injections

OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability has been fixed. Details The Open Computer and...

DSA-1794-1 linux-2.6 - multiple vulnerabilities

Bulletin has no description...

Golabi CMS <= 1.0.1 Session Poisoning Vulnerability

Exploit for unknown platform in category web applications =================================================== Golabi CMS = 1.0.1 Author: R3dM0ve HomePage: http://golabicms.sourceforge.net/ + Vulnerability Info: Type: Session Poisoning Bug Hunter: CrazyAngel Vul URL:...

Golabi CMS 1.0.1 - Session Poisoning

-------------------------------------------------------------------------------- \ \ / \ | | / \ /\ \ \ \ /| | \ /|| / / | /| /\ / \ / / / // / /// / -------------------------------------------------------------------------------- wWw.CrazyAngel.iR - info-AT-CrazyAngel.iR...

Golabi CMS 1.0.1 - Session Poisoning

Golabi CMS 1.0.1 - Session Poisoning -------------------------------------------------------------------------------- \ \ / \ | | / \ /\ \ \ \ /| | \ /|| / / | /| /\ / \ / / / // / /// / -------------------------------------------------------------------------------- wWw.CrazyAngel.iR -...

PHP 5.2.9 cURL - Safe_mode open_basedir Restriction Bypass

PHP 5.2.9 cURL - Safemode openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/34475/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations. This vulnerability...

Ubuntu Update for postfix vulnerability USN-636-1

Ubuntu Update for Linux kernel vulnerabilities USN-636-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6361.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postfix vulnerability USN-636-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for samba regression USN-544-2

Ubuntu Update for Linux kernel vulnerabilities USN-544-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5442.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for samba regression USN-544-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.ne...

Ubuntu: Security Advisory (USN-493-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PTK contains multiple vulnerabilities

Overview The PTK sleuthkit interface contains multiple vulnerabilities. If exploited, these vulnerabilities may allow an attacker to gain elevated privileges or conduct XSS attacks. Description PTK is an interface to the sleuthkit forensic tools that uses Apache, PHP and MySQL. PTK versions 1.0.0...

Trend Micro InterScan Web Security Suite < 3.1 Build 1237 Multiple Flaws

Trend Micro InterScan Web Security Suite is installed on the remote host. The installed version fails to restrict non-admin accounts 'Auditor' and 'Report Only' from modifying system configurations even though these accounts do not have sufficient permissions. C Tenable Network Security, Inc...