9547 matches found
DataWizard FTPXQ Default Accounts
The remote FTP server has one or more default test accounts. Description : The version of DataWizard FTPXQ that is installed on the remote host has one or more default accounts setup which can allow an attacker to read and/or write arbitrary files on the system. OpenVAS Vulnerability Test $Id:...
SA-2008-066 - Shindig-Integrator - Multiple vulnerabilities
Shindig-Integrator integrates the open social Shindig container with Drupal. The module contains numerous flaws. Among them are the following issues. Malicious users are able to insert arbitrary HTML and script code into certain module generated pages. Such a Cross site scripting vulnerability ca...
Default Password (gforge) for 'root' Account
The account 'root' on the remote host has the password 'gforge'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "gforge"; include'deprecatednasllevel.inc'; include'compat.inc'; if...
Husdawg, LLC Systems Requirements Lab ActiveX control and Java applet vulnerable to arbitrary code download and execution
Overview The Husdawg, LLC. System Requirements Lab ActiveX control and Java applet allow an unauthenticated remote attacker to download and execute arbitrary code. Description Husdawg, LLC. provides an ActiveX control and signed Java Applet that are used for benchmarking the capabilities of a PC...
iseemedia / Roxio / MGI Software LPViewer ActiveX control stack buffer overflows
Overview The iseemedia LPViewer ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The iseemedia LPViewer ActiveX control, which is provided by the file LPControl.dll, is a...
Mozilla Foundation Security Advisory 2008-41
Mozilla Foundation Security Advisory 2008-41 Title: Privilege escalation via XPCnativeWrapper pollution Impact: Critical Announced: September 23, 2008 Reporter: mozbugra4, Olli Pettay Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 Thunderbird 2.0.0.17 SeaMonkey...
LanSuite 3.3.2 (fckeditor) Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications ======================================================== LanSuite 3.3.2 fckeditor Arbitrary File Upload Exploit ======================================================== !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use...
InstallShield Update Service Agent ActiveX control memory corruption
Overview The InstallShield Update Service ActiveX control contains a memory corruption vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The InstallShield Update Service contains an ActiveX control called Update Service...
Cpanel <= 11.x (Fantastico) LFI Vulnerability (sec bypass)
Exploit for unknown platform in category web applications ========================================================== Cpanel First Create directory Let the name /includes/ and upload Shell.php in /includes/ Then rename it to enclicensingservers.php :::xploit::::...
cPanel 11.x - 'Fantastico' Local File Inclusion
Fantastico In all Version Cpanel 11.x First Create directory Let the name /includes/ and upload Shell.php in /includes/ Then rename it to enclicensingservers.php :::xploit:::: http://xxx.com:2082/frontend/x/fantastico/includes/xml.php?fantasticopath=/home/user Discoverd By : joker1 for info :...
freebsd/x86 setreuid, execve(pfctl -d) 56 bytes
No description provided by source. CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 bytes The simples way to disable the FreeBSD's packet filter. We do not flush all rules pfctl -F all but only turn the firewall off. Assembly code:...
WebPortal CMS <= 0.7.4 (fckeditor) Arbitrary File Upload Vulnerability
No description provided by source. S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site: wWw.SvvaT.IR - Exploit:...
WebPortal CMS 0.7.4 - FCKeditor Arbitrary File Upload
WebPortal CMS 0.7.4 - FCKeditor Arbitrary File Upload S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site:...
freebsd/x86 - setreuid, execvepfctl -d 56 bytes
freebsd/x86 setreuid, execvepfctl -d 56 bytes. Shellcode exploit for freebsdx86 platform CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 bytes The simples way to disable the FreeBSD's packet filter. We do not flush all rules pfctl -F all but only...
freebsd/x86 setreuid, execve(pfctl -d) 56 bytes
Exploit for freebsd/x86 platform in category shellcode =============================================== freebsd/x86 setreuid, execvepfctl -d 56 bytes =============================================== CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 byt...
zanficms-upload.txt
S.W.A.T. Title: Zanfi CMS lite / Jaw Portal free fckeditor Remote Arbitrary File Upload Vendor: http://www.zanfi.nl/down.php?file=ZanfiCmsLite.rar Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable The Uploader In Config File ; Demo:...
Sybase Enterprise Application Server Management Console detection
The remote host is running the Sybase Enterprise Application Server JSP Administration Console. Sybase EAServer is the open application server from Sybase Inc an enterprise software and services company, exclusively focused on managing and mobilizing information. This NVT was deprectated and the...
SoftArtisans XFile FileManager ActiveX control stack buffer overflows
Overview The SoftArtisans XFile FileManager ActiveX control contains several stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SoftArtisans XFile is an ActiveX file transfer application. The XFile FileManager...
linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes
No description provided by source. / Linux/x86 Fedora 8 setuid0 + setgid0 + execve"echo 0 /proc/sys/kernel/randomizevaspace" by LiquidWorm 2008 c www.zeroscience.org liquidworm at gmail.com 79 bytes. / char sc = "\x6a\x17" // push $0x17 "\x58" // pop %eax "\x31\xdb" // xor %ebx, %ebx "\xcd\x80" /...
Cross-Site Scripting Vulnerability in Hitachi Web Server Status Information Display Function
Overview A cross-site scripting vulnerability has been found with the Status Information Display function of Hitachi Web Server. Impact An attacker could execute a cross-site scripting attack by sending a request that contains malicious scripts. The vulnerability does not affect the products if t...