Slackware Advisory SSA:2003-237-01 unzip vulnerability patched

The remote host is missing an update as announced via advisory SSA:2003-237-01. OpenVAS Vulnerability Test $Id: esoftslkssa200323701.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

rpc-grind NSE Script

Fingerprints the target RPC port to extract the target service, RPC number and version. The script works by sending RPC Null call requests with a random high version unsupported number to the target service with iterated over RPC program numbers from the nmap-rpc file and check for replies from t...

Joomla! Component com_enmasse 1.2.0.4 - SQL Injection

Joomla! Component comenmasse 1.2.0.4 - SQL Injection Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Español hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del us...

Joomla! Component com_enmasse 1.2.0.4 - SQL Injection

Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Español hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del uso que se le de. ya que es posible obtener lucro...

Plixer / Dell SonicWALL Scrutinizer Detection (HTTP)

HTTP based detection of Plixer Scrutinizer aka Dell SonicWALL Scrutinizer. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Race condition

The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors...

CVE-2012-3386

The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors...

Joomla Component com_enmasse Remote Sql Injection Exploit

Exploit for php platform in category web applications Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Espaсol hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del u...

Joomla Enmasse SQL Injection

Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Español hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del uso que se le de. ya que es posible obtener lucro...

Windows Gather TortoiseSVN Saved Password Extraction

This module extracts and decrypts saved TortoiseSVN passwords. In order for decryption to be successful this module must be executed under the same privileges as the user which originally encrypted the password. This module requires Metasploit: https://metasploit.com/download Current source:...

MySQL Authentication Bypass Password Dump

This module exploits a password bypass vulnerability in MySQL in order to extract the usernames and encrypted password hashes from a MySQL server. These hashes are stored as loot for later cracking. Impacts MySQL versions: - 5.1.x before 5.1.63 - 5.5.x before 5.5.24 - 5.6.x before 5.6.6 And Maria...

CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the 1 IMAP, 2 POP3, or 3 SMTP protocol...

DEBIAN-CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the 1 IMAP, 2 POP3, or 3 SMTP protocol...

CVE-2012-0036

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the 1 IMAP, 2 POP3, or 3 SMTP protocol...

CVE-2012-2225

360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...

Design/Logic Flaw

360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...

CVE-2012-2225

CVE-2012-2225 affects 360zip 1.93beta. The vulnerability allows remote code execution via vectors related to file browsing and file extraction. Root cause details are not fully specified in the provided documents, and there is no explicit exploit description or affected versions beyond 1.93beta. ...

CVE-2012-2225

360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction...

Homeland Security hacking into gaming consoles to obtain user data

Homeland Security hacking into gaming consoles to obtain user data The U.S. government has hired a California-based company to hack into video game consoles, such as Xbox 360 and PlayStation 3, to watch criminals, especially child predators, and learn how to collect evidence against them. The U.S...

Navy Hires Contractor to Data-Mine Gaming Consoles

The U.S. Navy recently hired an outside contractor, Obscure Technologies, to develop computer forensics tools capable of analyzing network traffic and stored data on gaming consoles. The contract, valued at $177,237.50, calls on Obscure Technologies to create hardware and software tools that can ...