1342 matches found
Linux Kernel 2.x sock_sendpage() Local Ring0 Root Exploit
No description provided by source. / dedicated to my best friend in the whole world, Robin Price the joke is in your hands just too easy -- some nice library functions for reuse here though credits to julien tinnes/tavis ormandy for the bug may want to remove the attributeregparm3 for 2.4 kernels...
Fedora 11 : squirrelmail-1.4.18-1.fc11 (2009-4875)
Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - updated to 1.4.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
CVE-2009-1408
creationtimestamp| type| source ---|---|--- 2009-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8453...
Amaya 11.1 XHTML Parser Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================== Amaya 11.1 XHTML Parser Remote Buffer Overflow PoC ================================================== =cicatriz ==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer...
openSUSE 10 Security Update : NetworkManager-kde (NetworkManager-kde-6031)
The knetworkmanager configuration was too permissive and allowed any user to read secrets CVE-2009-0365. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update NetworkManager-kde-6031. The text...
ESET Remote Administrator < 3.0.105 Additional Report Settings XSS
ESET Remote Administrator is installed on the remote system. The installed version is less than version 3.0.105, and such versions are reportedly affected by an HTML injection vulnerability. An attacker can exploit this vulnerability to cause arbitrary HTML and script code to be executed with in...
CVE-2009-0405
creationtimestamp| type| source ---|---|--- 2009-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7901...
openSUSE 10 Security Update : acroread (acroread-5749)
The acroread package was update to fix several security vulnerabilities in the JavaScript engine. CVE-2008-2992, CVE-2008-2549, CVE-2008-4812, CVE-2008-4813, CVE-2008-4817, CVE-2008-4816, CVE-2008-4814, CVE-2008-4815 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
logzpodcast-sql.txt
Logz podcast CMS version 1.3.1 Remote sql inj download: http://sourceforge.net/project/showfiles.php?groupid=107225&packageid=178479&releaseid=635701 ---------------------------------------------------------- Discovered By: ZoRLu Date: 31.10.2008 Home: www.z0rlu.blogspot.com contact:...
MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695) (uncredentialed check)
The remote host has HIS Host Integration Server installed. The remote version of this product is affected by a code execution vulnerability in its RPC interface. An attacker could exploit this flaw to execute arbitrary code on the remote host by making rogue RPC queries. C Tenable Network Securit...
CVE-2008-7001
creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6405...
AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution
The remote web server is running a version of awstatstotals.php which does not properly sanitize its 'sort' argument. An attacker can run arbitrary commands on the remote host within the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2008-7091
creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6172 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6173...
Mac OS X Multiple Vulnerabilities (Security Update 2008-004)
The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-004 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...
eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...
Fedora 8 : nagios-plugins-1.4.11-2.fc8 (2008-3061)
Upstream released a new version. This also fixes CVE-2007-5198 315101. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
MikroTik RouterOS with Blank Password (telnet check)
The remote host is running MikroTik RouterOS without a password for its 'admin' account. Anyone can connect to it and gain administrative access to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid30213;...
Fedora 7 : clamav-0.92-6.fc7 (2008-0170)
Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...
Flash Player < 7.0.73.0 / 9.0.115.0 Multiple Vulnerabilities (APSB07-20)
According to its version number, the instance of Flash Player on the remote Windows host is affected by multiple issues, including several which could allow for arbitrary code execution by means of a malicious SWF file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Hosting Controller - Multiple Security Bugs (Extremely Critical)
Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...