CGI Generic Tests HTTP Errors

Nessus ran into trouble while running its generic CGI tests against the remote web server for example, connection refused, timeout, etc. When this happens, Nessus aborts the current test and switches to the next CGI script on the same port or to another web server. Thus, test results may be...

CGI Generic Command Execution

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Local DoS Exploit

No description provided by source. / Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Dos Exploit ariginal idéé : Jon Oberheide łł http://www.milw0rm.com/exploits/7405 tested : 2.6.27.7-generic - 2.6.18 - 2.6.24-1 by : ADU-T patching : http://marc.info/?l=linux-netdev&m=122841256115780&w=2 /...

Linux Kernel 2.6.27-7-generic Denial Of Service

/ Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Dos Exploit ariginal idéé : Jon Oberheide łł http://www.milw0rm.com/exploits/7405 tested : 2.6.27.7-generic - 2.6.18 - 2.6.24-1 by : ADU-T patching : http://marc.info/?l=linux-netdev&m=122841256115780&w=2 / include include include include includ...

Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Local DoS Exploit

Exploit for linux platform in category dos / poc =================================================================== Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Local DoS Exploit =================================================================== / Linux Kernel 2.6.27.7-generic - 2.6.18 -...

CVE-2008-5186

The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...

PT-2008-6329 · Nigel Mcnie · Geshi

Name of the Vulnerable Software and Affected Versions: Generic Syntax Highlighter GeSHi versions prior to 1.0.8.1 Description: The set language path function in geshi.php might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $pa...

CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash

CUPS 1.3.7 - Cross-Site Request Forgery Add RSS Subscription Remote Crash // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CUPS daemon to crash // by Adrian 'pagvac' Pastor | GNUCITIZEN.org forvar i=1;i"; / TESTED ON: Ubuntu 8.04.1 fully patched as of 19th Oct 2008 Linux...

Design/Logic Flaw

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3436

Notepad++ prior to 4.8.1 is affected by CVE-2008-3436 through its GUP generic update process, which does not properly verify update authenticity. This enables MITM attackers to deliver arbitrary code via a Trojan-horse update, as demonstrated by evilgrade and DNS cache poisoning. The provided con...

Windows Command, Generic Command Execution

Executes the supplied command This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 8 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def initializeinfo =...

OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service

OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...

Citrix NetScaler Generic_API_Call.PL跨站脚本漏洞

Citrix NetScaler是一款安全易用的Web应用交付解决方案。 Citrix NetScaler GenericAPICall.PL不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击，获得目标用户敏感信息。 问题是由于'GenericAPICall.PL'脚本对用户提交的'standalone'参数缺少过滤，提交恶意脚本代码作为参数数据，并诱使用户处理，可导致获得目标用户敏感信息，或未授权访问应用程序。 Citrix NetScaler 8.0 build 47.8 目前没有详细解决方案提供：...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

CVE-2007-3773 involves a CSRF flaw in the Email-Template module of a Generic YouTube Clone Script. The vulnerability enables remote attackers to cause administrators to upload files with arbitrary types to templates/emails/. The documents confirm the affected component (Email-Template module) and...

CVE-2007-2156

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

CVE-2007-2156

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

CVE-2007-2156

Summary of CVE-2007-2156 (initial document): Rezervi Generic 0.9 contains multiple PHP remote file inclusion vulnerabilities. An attacker can trigger PHP code execution by supplying a URL in the root parameter to various scripts under templates/ (datumVonDatumBis.inc.php, footer.inc.php, header.i...