Lucene search
+L

1456 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/09 12:00 a.m.•5 views

CVE-2009-2508: Undefined Security Weakness

The single sign-on implementation in Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previou...

6.9CVSS5.8AI score0.01262EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/09 12:00 a.m.•4 views

CVE-2009-2509: Improper Input Validation

Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...

9CVSS6.5AI score0.17053EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2009/12/09 12:00 a.m.•105 views

Microsoft Security Bulletin MS09-070 - Important Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726)

Microsoft Security Bulletin MS09-070 - Important Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution 971726 Published: December 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in...

9CVSS0.4AI score0.17053EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2009/12/08 12:00 a.m.•46 views

Microsoft Active Directory Federation Services Code Execution (MS09-070; CVE-2009-2509)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Federation Services ADFS helps the client to use single sign-on by securely sharing digital identity and entitlement rights across security and enterprise boundaries. A remote...

9CVSS7.8AI score0.17053EPSS
SaveExploits1
Symantec
Symantec
•added 2009/12/08 12:00 a.m.•35 views

Microsoft Active Directory Federation Services Header Validation Remote Code Execution Vulnerability

Description Microsoft Active Directory Federation Services ADFS is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application, which may aid in further attacks. Technologies Affected Microsoft Windows Server 2003...

8.2AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2009/12/08 12:00 a.m.•58 views

MS09-070: Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726)

The version of Microsoft Active Directory Federation Services ADFS installed on the remote host is affected by the following vulnerabilities : - Insufficient session management validation in the single sign-on functionality of ADFS could allow a remote, authenticated user to spoof the identity of...

9CVSS5.5AI score0.17053EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2009/06/23 12:00 a.m.•46 views

Acajoom Component for Joomla! <= 3.2.6 Backdoor Detection

Acajoom, a third-party component for Joomla! for managing mailing lists, newsletters, auto-responders, and other communications, is running on the remote host. This version of Acajoom is equal or prior to 3.2.6. It is, therefore, affected by a backdoor in the self.acajoom.php script. An...

6AI score
SaveExploits0References2
Packet Storm
Packet Storm
•added 2008/05/29 12:00 a.m.•39 views

joomlaartist-sql.txt

Cr@zyKing / [email protected] Joomla Component Artist Remote Sql İnjection M4sterZ sqL / t4cs1zkr4L : Down : http://www.joomlaresource.com/joomladownloads/Download/JoomlaComponents/Artists/ http://localhost/index.php?option=comartist&idgalery=Sql Sql :...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/05/29 12:00 a.m.•29 views

Joomla Component Artist (idgalery) SQL Injection Vulnerability

No description provided by source. Cr@zyKing / [email protected] Joomla Component Artist Remote Sql njection M4sterZ sqL / t4cs1zkr4L : Down : http://www.joomlaresource.com/joomladownloads/Download/JoomlaComponents/Artists/ http://localhost/index.php?option=comartist&idgalery=Sql Sql :...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/05/28 12:00 a.m.•27 views

Joomla! Component Artist - 'idgalery' SQL Injection

Cr@zyKing / [email protected] Joomla Component Artist Remote Sql Injection M4sterZ sqL / t4cs1zkr4L : Down : http://www.joomlaresource.com/joomladownloads/Download/JoomlaComponents/Artists/ http://localhost/index.php?option=comartist&idgalery=Sql Sql :...

5.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/11/07 12:00 a.m.•46 views

OpenLDAP 2.2.29 Remote Denial of Service Exploit (meta)

No description provided by source. vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of th...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/11/07 12:00 a.m.•69 views

Omni-NFS Server 5.2 (nfsd.exe) Remote Stack Overflow Exploit (meta)

No description provided by source. vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of the...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/11/06 12:00 a.m.•35 views

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow (Metasploit)

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow Metasploit vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to us...

0.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/11/06 12:00 a.m.•34 views

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...

7.4AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 1970/01/01 12:00 a.m.•35 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 1970/01/01 12:00 a.m.•11 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Rows per page
Query Builder