311 matches found
SLES10: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd...
SLES11: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-dom php5-exif php5-fastcgi php5-ftp php5-gd php5-gettex...
SLES11: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-dom php5-exif php5-fastcgi php5-ftp php5-gd php5-gettex...
SLES11: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-dom php5-exif php5-fastcgi php5-ftp php5-gd php5-gettex...
SLES9: Security update for Security update PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-modphp4 apache2-modphp4 modphp4 modphp4-apache2 modphp4-core modphp4-servlet php4 php4-bcmath php4-bz2 php4-calendar php4-ctype php4-curl php4-dba...
SLES9: Security update for PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-gmp php4-ldap php4-xslt php4-servlet php4-ftp php4-exif php4-devel php4-yp php4-shmop php4-iconv php4 php4-pear php4-sysvshm php4-mimemagic php4-curl...
SLES9: Security update for PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-zlib php4-shmop php4-ftp php4-filepro php4-mcrypt php4-servlet php4-gmp php4-bz2 php4-snmp php4-mysql php4-mimemagic php4 php4-pgsql modphp4-servlet...
Mandrake Security Advisory MDVSA-2009:167 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:167. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method
This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the SYS.LT.FINDRICSET package via Evil Cursor technique. Tested on oracle 10.1.0.3.0 -- should work on thru 10.1.0.5.0 and supposedly on 11g. Fixed with Oracle Critical Patch update October 2007. This module...
Oracle DB SQL Injection via SYS.DBMS_METADATA.GET_XML
This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the SYS.DBMSMETADATA.GETXML package/function. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB S...
Oracle DB SQL Injection via SYS.DBMS_METADATA.GET_GRANTED_XML
This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the SYS.DBMSMETADATA.GETGRANTEDXML package/function. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Orac...
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-61)
This update of php5 fixes : - possible stack-based buffer overflow CVE-2008-2050 - incomplete escapeshellcmd CVE-2008-2051 - printf integer overflow CVE-2008-1384 - insecure GENERATESEED macro CVE-2008-2107 - timezone update for DST in Pakistan %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Mandrake Security Advisory MDVSA-2009:145 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:145. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
FreeBSD Ports: php4-dba
The remote host is missing an update to the system as announced in the referenced advisory. VID 1e8031be-4258-11de-b67a-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 1e8031be-4258-11de-b67a-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: php4-dba
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Mandrake Security Advisory MDVSA-2009:090 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:090. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Oracle 10g MDSYS.SDO_TOPO_DROP_FTBL SQL Injection Exploit (meta)
Exploit for multiple platform in category local exploits ================================================================ Oracle 10g MDSYS.SDOTOPODROPFTBL SQL Injection Exploit meta ================================================================ $Id: droptabletrigger.rb This file is part of the...
Oracle 10g SYS.LT.REMOVEWORKSPACE SQL Injection Exploit
// /Oracle 10g SYS.LT.REMOVEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user advanced extproc/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using advanced extproc method/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / /...
Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit
No description provided by source. // /Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit/ /grant DBA and create new OS user java/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using java procedures / // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT:...
Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit
No description provided by source. // /Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit/ /grant DBA and create new OS user using scheduller/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using scheduler/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public...