FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ========================================================= FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit ========================================================= Author : Houssamix FlexCell Grid Control 5.6.9 Remote File Overwri...

SHOP-INET v4 (show_cat2.php grid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= SHOP-INET v4 showcat2.php grid SQL Injection Vulnerability ============================================================= Exploit :...

Easy Grid ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 33272 Easy Grid ActiveX控件是用于打印、预览表格、图标、公式、表达式的工具。 EasyGrid.SGCtrl.32 ActiveX控件（EasyGrid.ocx）没有安全地调用DoSaveFile方式，如果用户受骗访问了恶意网页并向该方式传送了特制参数的话，就会导致向用户系统写入任意文件。 Easy Grid Control Team Easy Grid ActiveX 3.51 厂商补丁： Easy Grid Control Team ----------------------...

OpenSSL 'EVP_VerifyFinal'函数签名验证漏洞

BUGTRAQ ID: 33150 CVE ID：CVE-2008-5077 CNCVE ID：CNCVE-20085077 OpenSSL是一款开放源码的SSL实现，用来实现网络通信的高强度加密。 部分OpenSSL函数验证DSA和ECDSA密钥时不正确验证"EVPVerifyFinal"函数返回值，发送特殊构建的签名证书链给客户端，可绕过签名检查。 通过恶意服务器或中间人攻击，可使证书链中的畸形SSL/TLS签名绕过客户端软件检查，导致盲目信任并泄漏敏感信息。 成功利用此漏洞需要服务器使用包含DSA或者ECDSA密钥的证书。 Ubuntu Ubuntu Linux 8.10 spar...

CVE-2008-5404

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...

FlexCell Grid Control ActiveX Arbitrary File Overwrite Vulnerability

This host is installed with FlexCell Grid Control ActiveX and is prone to arbitrary File Overwrite vulnerability. OpenVAS Vulnerability Test $Id: secpodflexcellactivexfileoverwrirevuln900406.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: FlexCell Grid Control ActiveX Arbitrary File Overwrite...

FlexCell Grid ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 32443 FlexCell Grid ActiveX控件是一款表格控制工具，提供拷贝、拷贝预览、图表、合并单元格等全面功能。 FlexCell Grid ActiveX控件（FlexCell.ocx）没有正确地验证对HttpDownloadFile方式的输入参数，如果远程攻击者受骗访问了恶意网站并向该方式传送了特制参数的话，就可能导致以当前登录用户的权限覆盖任意系统文件。 FlexCell Technologies FlexCell Grid ActiveX 5.7.0.1 FlexCell Technologies ---------------------...

Design/Logic Flaw

Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service daemon crash via unspecified vectors...

CVE-2008-1756

Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service daemon crash via unspecified vectors...

CVE-2008-1756

The CVE-2008-1756 entry concerns Sun N1 Grid Engine 6.1, specifically the Qmaster daemon. The vulnerability is described as an unspecified local issue that allows a denial of service (daemon crash). The available documents identify the affected component (Qmaster daemon) and the impact (local DoS...

CVE-2008-1756

Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service daemon crash via unspecified vectors...

Solaris 10 (sparc) : 127429-07 (deprecated)

N1 Grid Engine 6.1: maintenance patch. Date this patch was last updated by Sun : Nov/24/09 This plugin has been deprecated and either replaced with individual 127429 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 9 (x86) : 127430-07

N1 Grid Engine 6.1x86: maintenance patch. Date this patch was last updated by Sun : Nov/24/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 127429-07

N1 Grid Engine 6.1: maintenance patch. Date this patch was last updated by Sun : Nov/24/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 127431-07 (deprecated)

N1 Grid Engine 6.1x86: maintenance patch. Date this patch was last updated by Sun : Nov/24/09 This plugin has been deprecated and either replaced with individual 127431 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Solaris 10 (x86) : 127430-07 (deprecated)

N1 Grid Engine 6.1x86: maintenance patch. Date this patch was last updated by Sun : Nov/24/09 This plugin has been deprecated and either replaced with individual 127430 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Solaris 8 (sparc) : 127429-07

N1 Grid Engine 6.1: maintenance patch. Date this patch was last updated by Sun : Nov/24/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Yahoo Music Jukebox MediaGrid ActiveX buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0625 BID: 27578 OSVDB: 41051 Background Yahoo! Music Jukebox is a music player capable of playing, ripping, and burning MP3s and CDs, creating and sharing playlists, streaming radio stations, and purchasing music. Problem A buffer overflow vulnerability in the...

Unfixed XSS vulnerability at grid-se.marnet.net.mk

Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting grid-se.marnet.net.mk, which at the time of submission ranked 605922 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Format string

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...