PT-2010-1838 · Transmission · Transmission

Name of the Vulnerable Software and Affected Versions: Transmission versions 1.22, 1.34, 1.75, and 1.76 Description: The issue allows remote attackers to overwrite arbitrary files via a .. dot dot in a pathname within a .torrent file. This is due to a directory traversal vulnerability in...

oBlog Persistant XSS, CSRF, Admin Bruteforce

No description provided by source. ------------------------------------------------------------------------------------------------- Application: oBlog Version: the only one there is : Download: http://www.dootzky.com/images/projects/oBlog.zip Author of this full disclosure: Milos Zivanovic...

SA-CONTRIB-2009-111 - Randomizer - Cross Site Scripting

The Randomizer module assists researchers and students who want an easy way to perform random sampling or assign participants to experimental conditions. It accepts form input as parameters for generating a pseudo-random list of numbers. The module does not sanitize some of the user-supplied data...

Outreach Project Tool 'CRM_path' Parameter Remote File Inclusion Vulnerability

The host is running Outreach Project ToolOPT and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gboutreachprojecttoolrfivuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Outreach Project Tool 'CRMpath' Parameter Remote File Inclusion Vulnerability Authors: Antu Sanadi...

PT-2009-6381 · Haihaisoft · Haihaisoft Universal Player

Name of the Vulnerable Software and Affected Versions: Haihaisoft Universal Player MyActiveX.ocx version 1.4.8.0 Description: The issue is related to a stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control. This can be exploited by remote attackers to execute arbitrary code...

Golden FTP Server 'DELE' Command Directory Traversal Vulnerability

This host is running Golden FTP Server and is prone to Directory Traversal vulnerability. OpenVAS Vulnerability Test $Id: gbgoldenftpserverdirtravvuln.nasl 6515 2017-07-04 11:54:15Z cfischer $ Golden FTP Server 'DELE' Command Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

Autodesk SoftImage Scene TOC Arbitrary Command Execution

Exploit for unknown platform in category local exploits ======================================================== Autodesk SoftImage Scene TOC Arbitrary Command Execution ======================================================== Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution CVE-ID...

Autodesk SoftImage Scene TOC - Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk SoftImage Scene TOC Arbitrary Command Execution 1. Advisory Information Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution Advisory Id:...

Wireshark Multiple Denial Of Service Vulnerabilities - Nov09 (Windows)

This host is installed with Wireshark and is prone to multiple Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnnov09win.nasl 4906 2017-01-02 13:06:55Z teissa $ Wireshark Multiple Denial Of Service Vulnerabilities - Nov09 Windows Authors: Antu Sanadi...

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (1)

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow 1 -- KC Security PUBLIC ADVISORY -- http://www.rangos.de -- 11-01-2009 RhinoSoft.com Serv-U 9.0.0.5 WebClient Remote Buffer Overflow Background ------------ Serv-U includes a simple, browser-based transfer client perfect for every business...

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (1)

-- KC Security PUBLIC ADVISORY -- http://www.rangos.de -- 11-01-2009 RhinoSoft.com Serv-U 9.0.0.5 WebClient Remote Buffer Overflow Background ------------ Serv-U includes a simple, browser-based transfer client perfect for every business environment. The Web Client is accessed through a standard...

Serv-u web client 9.0.0.5 buffer overflow

No description provided by source. -- KC Security PUBLIC ADVISORY -- http://www.rangos.de -- 11-01-2009 RhinoSoft.com Serv-U 9.0.0.5 WebClient Remote Buffer Overflow Background ------------ Serv-U includes a simple, browser-based transfer client perfect for every business environment. The Web...

SA-CONTRIB-2009-086 - OpenSocial Shindig-Integrator - Cross Site Scripting

The OpenSocial Shindig-Integrator module enables sites to host OpenSocial widgets. The module fails to sanitize user input, making it vulnerable to cross site scripting XSS attacks. This vulnerability is somewhat limited by the fact that an attacker would need an account with the permissions to...

PT-2009-1042 · Linux +2 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31-git11 Red Hat Enterprise Linux kernel versions 2.4.21 Description: The issue concerns multiple vulnerabilities in the Linux kernel and Red Hat Enterprise Linux kernel, which can lead to a disruption of...

cP Creator 'tickets' Cookie SQL Injection Vulnerability

cP Creator is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SMB2 Exploit Fitted into Metasploit; Attacks Likely

Fully functional exploit code for the still unpatched Windows SMB v2 vulnerability has been released to the public domain via the freely available Metasploit point-and-click attack tool, raising the likelihood for remote in-the-wild code execution attacks. The exploit, created and released by...

Internet Explorer 'KEYGEN' Element Denial Of Service Vulnerability

This host is installed with Internet Explorer and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiekeygendosvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ Internet Explorer 'KEYGEN' Element Denial Of Service Vulnerability Authors: Sharath S Copyright: Copyrig...

WoltLab Burning Board Cross-Site Request Forgery Vulnerability

This host is running WoltLab Burning Board and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodwoltlabburningboardcsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoltLab Burning Board Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyrigh...

Windows SMB version 2 vulnerability

Overview Microsoft Windows Vista and Server 2008 do not correctly parse SMB version 2 messages.This vulnerability could allow an attacker to execute arbitrary code. Description The Server Message Block version 2 SMBv2 protocol is the successor to the original SMB protocol. SMBv2 is available in...

openssh security, bug fix, and enhancement update

4.3p2-36 - tiny change in chroot sftp capability into openssh-server solve ls speed problem 440240 4.3p2-35 - workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 502230 4.3p2-34 - disable protocol 1 in the FIPS mode 4.3p2-33 - fix scp hangup on exit 454812 - call integrity...