Google Chrome Multiple Vulnerabilities - (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwin02.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Vulnerabilities - Windows Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

CVE-2010-0185

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL...

Easy Passwords Found In RockYou Data Leak

Analysis of the 32 million passwords recently exposed in the breach of social media application developer RockYou last month provides further proof that consumers routinely use easy to guess login credentials. Read the full article. The Register...

Timbuktu PlughNTCommand Named Pipe Buffer Overflow

This module exploits a stack based buffer overflow in Timbuktu Pro version 'Timbuktu PlughNTCommand Named Pipe Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow in Timbuktu Pro version = 8.6.6 in a pretty novel way. This exploit requires two connections. The...

Nortel Application Gateway information leak

Web page contains login and password for administrative access...

DEBIAN-CVE-2009-0844

The getinputtoken function in the SPNEGO implementation in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote attackers to cause a denial of service daemon crash and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read...

Issue with core dump owner

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

DSA-1655-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

Debian DSA-1636-1 : linux-2.6.24 - denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or leak sensitive data. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3272 Tobias Klein reported a locally exploitable data leak in the...

DSA-1630-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit

Exploit for unknown platform in category web applications =============================================================== moziloCMS 1.10.1 download.php Arbitrary Download File Exploit =============================================================== !/usr/bin/perl moziloCMS 1.10.1 Perl exploit...

Cisco IOS多播虚拟专用网MDT Data Join消息处理数据泄露漏洞

BUGTRAQ ID: 28464 CVECAN ID: CVE-2008-1156 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS在实现多播虚拟专用网（MVPN）时存在漏洞，允许攻击者发送特制的多播分布树（MDT）Data Join消息导致在核心路由器上创建额外的多播状态。 这个漏洞还允许泄露其他MPLS VPN的多播通讯，可以接收连接到同一供应商边界（PE）路由器的VPN的多播通讯。如果要成功利用这个漏洞，攻击者必须知道或猜测到远程PE路由器的边界网管协议（BGP）同层IP地址，以及其他MPLS VPN所使用的多播组的地址。 Cisco IOS 12.4...

Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network MVPN Data Leak Advisory ID: cisco-sa-20080326-mvpn http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml Revision 1.0 For Public Release 2008 March 26 1600 UTC GMT Summar...

krb5: possible leak of sensitive data from krb5kdc using krb4 request

The Kerberos 4 support in KDC in MIT Kerberos 5 krb5kdc does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."...

CVE-2007-5794

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

Citrix Access Gateway information leak

HTTP session cookie is passed through HTTP GET request parameters, making it possible to leak it value thorugh Referer: field or in the browsing history...

elinks information leak

POST form data is sent over HTTP instead of HTTPs...

TIBCO Rendezvous <= 7.4.11 Password Extractor Local Exploit

No description provided by source. / Exploit: TIBCO RendezVous local password extractor version =7.4.11 Affected products: Tibco RendezOVous version =7.4.11 Author: Andres Tarasco Acua atarasco @ sia.es Advisory: http://www.514.es Status: Vendor notifification Timeline: ---------------- Discovere...

TIBCO Rendezvous 7.4.11 - Password Extractor

/ Exploit: TIBCO RendezVous local password extractor version tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions include define DECODE64c isasciic ? base64val...