Virtual Real Estate Manager 3.5 - SQL Injection

====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== Name : Virtual Real Estate Manager V 3.5 SQLi Vulnerability Date : june, 9 2010 Vendor url...

Worldweaver DX Studio Player 3.0.29 - 'shell.execute()' Command Execution (Metasploit)

$Id: dxstudioplayerexec.rb 9375 2010-05-26 22:39:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

openMairie openComInterne 'dsn[phptype]' Local File Inclusion Vulnerability

This host is running openMairie openComInterne and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbopenmairieopencominternelfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ openMairie openComInterne 'dsnphptype' Local File Inclusion Vulnerability Authors: Madhuri D...

openMairie openPlanning Multiple File Inclusion Vulnerabilities

This host is running openMairie openPlanning and is prone to multiple file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenmairieopenplanningmultfileinclvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ openMairie openPlanning Multiple File Inclusion Vulnerabilities Authors: Madhuri D...

Microsoft Internet Explorer 'IFRAME' DoS Vulnerability (May 2010)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tools > Internet Options…

Here are steps to disable various features in the latest version of Microsoft’s Internet Explorer browser. Start by opening Internet Explorer and selecting Tools then Internet Options…...

Facebook Makes Device, Identity Security Updates

Amid a controversy about privacy, Facebook unveiled new security features designed to protect user accounts. Read the full article. eWEEK...

Google Chrome Cross Site Data Leakage Vulnerability (Windows)

This host is installed with Google Chrome Web Browser and is prone to cross site data leakage vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromecrosssitedataleakagevuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome Cross Site Data Leakage Vulnerability Windows Authors: Antu...

Mereo <= 1.9.1 Directory Traversal Vulnerability - Active Check

Mereo is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Consumer Advocates in Facebook's Face

This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. Computerworld...

Foxit Launches 'Safe Mode' to Counter PDF Attacks

Foxit Corp has added new security features to its alternative PDF reader software to help thwart recent malware attacks that exploit the “/launch” feature. With Foxit PDF Reader Version 3.3, the company has added a Safe Mode that blocks external commands from being executed by the software. The...

osCommerce Local File Include and HTML Injection Vulnerabilities

osCommerce is prone to a local file-include vulnerability and an HTML- injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mandriva Update for tcsh MDVA-2010:123 (tcsh)

Check for the Version of tcsh OpenVAS Vulnerability Test Mandriva Update for tcsh MDVA-2010:123 tcsh Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Guestbook PHP Cross Site Scripting

Exploit Title: Guestbook PHP XSS Vulnerability Date: 24.04.2010 Author: Valentin Category: webapps/0day Version: 1.2.8 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Guestbook PHP XSS...

Sun Java System Web Server Multiple Vulnerabilities

This host has Sun Java Web Server running which is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservmultvuln.nasl 6637 2017-07-10 09:58:13Z teissa $ Sun Java System Web Server Multiple Vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2010 Greenbon...

Low: Red Hat Bug Fix Advisory: cman bug fix and enhancement update

Updated cman packages that fix bugs and add enhancements are now available. The Cluster Manager cman utility provides user-level services for managing a Linux cluster. Changes in this update: fencersa fails to login with new RSA II firmware. BZ549473 fencevirsh reports vm status incorrectly...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Netpet CMS Directory Traversal Vulnerability

The host is running Netpet CMS and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodnetpetcmsdirtravvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Netpet CMS Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

Mandriva Update for slib MDVA-2010:091 (slib)

Check for the Version of slib OpenVAS Vulnerability Test Mandriva Update for slib MDVA-2010:091 slib Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...