GateSoft Docusafe 'ECO.asp' SQL Injection Vulnerability

GateSoft Docusafe is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Power Manager Cross Site Request Forgery (CSRF) and XSS Vulnerability

This host is running HP Power Manager and is prone to cross site request forgery and cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbhppowermanagercsrfvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ HP Power Manager Cross Site Request Forgery CSRF and XSS Vulnerability Authors:...

Metasploit Framework v3.5.2 latest version download !

Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit Framework version 3.5.2! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits...

The Joys of Running a Bug Bounty Program

When Barracuda Networks started its bug bounty program about three months ago, company officials weren’t exactly sure what to expect. They didn’t know whether there’d be an onslaught of submissions or the sound of crickets chirping. The reality turned out to be somewhere in the middle. Barracuda...

WordPress RSS Feed Reader Plugin 'rss_url' Parameter Cross Site Scripting Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

SAUSAGE Con Delves into IT Security's 'Human Problem'

‘Why is security so hard?’ That’s the question that a new conference focused on “useable security” will attempt to answer by bringing together experts on security, software development and human-computer interaction. DEK: ‘Why is security so hard?’ That’s the question that a new conference will...

Microsoft Internet Explorer 'ReleaseInterface()' RCE Vulnerability

Internet Explorer is prone to a remote code execution RCE vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900278. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

MS Windows HID Functionality(Over USB) Code Execution Vulnerability

This host is installed with USB device driver software and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowshidoverusbcodeexecvuln.nasl 8724 2018-02-08 15:02:56Z cfischer $ MS Windows HID FunctionalityOver USB Code Execution Vulnerability Authors: Antu Sanadi...

XWiki Watch Multiple Cross Site Scripting Vulnerabilities

This host is running XWiki Watch and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikiwatchmultxssvuln.nasl 7276 2017-09-26 11:59:52Z cfischer $ XWiki Watch Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c...

TYPSoft FTP Server RETR CMD Denial Of Service Vulnerability

The host is running TYPSoft FTP Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbtypsoftftpserverretrdosvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ TYPSoft FTP Server RETR CMD Denial Of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011...

DD-WRT '/Info.live.htm' Multiple Information Disclosure Vulnerabilities

DD-WRT is prone to multiple remote information-disclosure issues because it fails to restrict access to sensitive information. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sahana Agasti Multiple Remote File Include Vulnerabilities

Sahana Agasti is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

VMware 2 Web Server Directory Traversal Vulnerability (Windows)

This host is installed with VMware 2 Web Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbvmwarewebserverdirtravvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware 2 Web Server Directory Traversal Vulnerability Windows Authors: Sooraj KS Copyright:...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

Android Update Adds Protections For Mobile Clickjacking

Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...

Awstats < 7.0 Configuration File Remote Arbitrary Command Execution Vulnerability

Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

9) Meet the new spam, same as the old spam

As in life in general, if something works, you stick with it. How else to explain the continued popularity and prevelance of e-mail based spam and phishing attacks, even though everyone knows that e-mail is so “1998”? Alas, the truth is that attacks embedded as links or malicious attachments in...

2) Set Web browsers to "stun"

Cyber criminals know that Web browsers are like mothers: everybody’s got one. They also know that if you’re shopping online, you’re using your Web browser to do it. That’s why Web based attacks are one of the most popular kind avenue of compromise and online. The good news is that most modern Web...

Drive-By Downloads Still Running Wild

For some time now, the browser has been the most dangerous piece of software on the Web, and to hear researchers tell it, the climate it likely to get far worse before it gets any better. The attack landscape has shifted in a lot of important ways in the last few years, but none of the changes ha...

Small FTPD Server Directory Traversal Vulnerability

The host is running Small FTPD Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbsmallftpdserverdirtravvun.nasl 5373 2017-02-20 16:27:48Z teissa $ Small FTPD Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbo...