PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL Injection

source: https://www.securityfocus.com/bid/43710/info Tausch Ticket Script is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit...

V-webmail Multiple PHP Remote File Inclusion Vulnerability

V-webmail is prone to Multiple PHP Remote File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmondSoft Multiple Classifieds Products - index.php Multiple Cross-Site Scripting Vulnerabilities

AlmondSoft Multiple Classifieds Products - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to...

AIOCP 1.4 - cp_html2txt.php Remote File Inclusion

AIOCP 1.4 - cphtml2txt.php Remote File Inclusion source: https://www.securityfocus.com/bid/35811/info AIOCP All In One Control Panel is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

PG Roommate Finder Solution - quick_search.php?part Cross-Site Scripting

PG Roommate Finder Solution - quicksearch.php?part Cross-Site Scripting source: https://www.securityfocus.com/bid/35814/info PG Roommate Finder Solution is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

[Full-disclosure] [NETRAGARD SECURITY ADVISORY] [< Safari 3.2.3 Arbitrary Code Execution + PoC ][NETRAGARD-20090622]

NETRAGARD ADVISORY http://www.netragard.com "The Specialist in Anti- Hacking" Advisory Summary --------------------------------------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Researcher : Kevin Finisterre Advisory ID : NETRAGARD-20090622...

Webmedia Explorer Multiple Cross Site Scripting Vulnerabilities

Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Link Logger syslogd resource overwhelm DoS

Remote: yes Credit: Mike Cyr, aka h00die Vulnerable: 2.4.10.15 ddwrt version but more than likely all versions Discussion: Link Logger is a program for logging, analysis and reporting of router traffic so you can easily spot attacks and abuses on your network. By sending a ton of spoofed traffic,...

LinkLogger 2.4.10.15 (syslog) Denial of Service Exploit

Exploit for linux platform in category dos / poc ======================================================= LinkLogger 2.4.10.15 syslog Denial of Service Exploit ======================================================= !/usr/bin/perl LinkLogger 2.4.10.15 syslog DoS Tested against 2.4.10.15 Coded by...

LinkLogger 2.4.10.15 - 'syslog' Denial of Service

!/usr/bin/perl LinkLogger 2.4.10.15 syslog DoS Tested against 2.4.10.15 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: 1. Based on code from http://www.pythonprasanna.com/Papers%20and%20Articles/Sockets/udpspoofpl.txt 2. The exact amount of packets to overwhelm the program and shut down...

Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)

This host is missing a critical security update according to Microsoft Bulletin MS09-018. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in Print Spooler Could Allow Remote Code Execution (961501)

This host is missing a critical security update according to Microsoft Bulletin MS09-022. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration source: https://www.securityfocus.com/bid/35196/info Apache Tomcat is prone to a username-enumeration weakness because it displays different responses to login attempts, depending on whether or not the username...

Lighttpd <= 1.4.23 'Trailing Slash' Information Disclosure Vulnerability

Lighttpd is prone to an information disclosure vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Sendmail 8.12.x - X-header Remote Heap Buffer Overflow (PoC)

Sendmail 8.12.x - X-header Remote Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/34944/info Sendmail is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer...

Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running th...

DotNetNuke 4.9.3 - 'ErrorPage.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35074/info DotNetNuke is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Opera PDF Javascript Security Bypass Vulnerability (Windows)

The host is installed with Opera Web Browser and is prone to PDF Javascript Security Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodoperapdfjsrestbypassvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera PDF Javascript Security Bypass Vulnerability Windows Authors: Antu Sanadi...

Mozilla Firefox PDF JavaScript Restriction Bypass Vulnerability - Windows

Mozilla Firefox browser is prone to a PDF JavaScript restriction bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...