Qemu: display: cirrus: oob access while doing bitblt copy backward mode

Quick emulator QEMU built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or...

Google Chrome Webkit Remote Code Execution Vulnerability (Linux)

The host is installed with Google Chrome and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromewebkitremotecodeexecvulnlin.nasl 6115 2017-05-12 09:03:25Z teissa $ Google Chrome Webkit Remote Code Execution Vulnerability Linux Authors: Arun Kallavi...

PHPCMS V9 getwebshell exploit and fix-vulnerability warning-the black bar safety net

Without any permission, directly to get WEBSHELL on. and... Actually. in. There is a condition limit, and have PHP parse the vulnerability of the host to pass to kill。。。。 Life on the outside, the most important not many friends but, super long standby. I'm Edison, you know me. Detailed descriptio...

o0mBBS <= 0.65B Remote File Upload

Exploit for asp platform in category web applications Exploit Title: o0mBBS !Muslims!,Mosta,team152,Inj3ct0r And all my Freinds + Algerian Hackers -----------------------------------------------------+ DzMafia © 2012 All rights reserved. 0day.today 2018-04-12...

LuraWave JP2 Browser Plug-In < 2.1.1.11 npjp2.dll Remote Buffer Overflow

The version of the LuraWave JP2 Browser Plug-In installed on the remote Windows host is earlier than 2.1.1.11 and thus reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can...

The Django development framework multiple security vulnerabilities-vulnerability warning-the black bar safety net

Affected version: Django 1.2.5 Django 1.3 beta 1 Django 1.2.4 Django 1.2.2 Django 1.2 Vulnerability description: Django is an open source Web application framework made of Python written. Django there are multiple security vulnerabilities, allow an attacker to obtain sensitive information,...

RedHat Update for bind RHSA-2011:0926-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

AIX 610004 : U841513

The remote host is missing AIX PTF U841513 which is related to the security of the package devices.pci.14103302.X11 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

IP Forwarding Enabled

The remote host has IP forwarding enabled. An attacker can exploit this to route packets through the host and potentially bypass some firewalls / routers / NAC filtering. Unless the remote host is a router, it is recommended that you disable IP forwarding. TRUSTED...

ipidseq NSE Script

Classifies a host's IP ID sequence test for susceptibility to idle scan. Sends six probes to obtain IP IDs from the target and classifies them similarly to Nmap's method. This is useful for finding suitable zombies for Nmap's idle scan -sI as Nmap itself doesn't provide a way to scan for these...

AIX 610003 : U828468

The remote host is missing AIX PTF U828468 which is related to the security of the package bos.net.nfs.adt You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U821535

The remote host is missing AIX PTF U821535 which is related to the security of the package bos.rte.bosinst You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 520009 : U811313

The remote host is missing AIX PTF U811313 which is related to the security of the package devices.pciex.14104003.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Mini File Host 1.2 (upload.php language) LFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== Mini File Host 1.2 upload.php language LFI Vulnerability ========================================================== Mini File Host = 1.2 Local File Inclusion Vulnerability AUTHOR :...

Solaris 8 (sparc) : 128624-11

SunOS 5.8: LDAP2 client, libc, libthread a. Date this patch was last updated by Sun : Mar/09/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

MS06-021: Cumulative Security Update for Internet Explorer (916281)

The remote host is missing the IE cumulative security update 916281. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21685;...

MS06-004: Cumulative Security Update for Internet Explorer (910620)

The remote host is missing the IE cumulative security update 910620. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid20904;...

Calendar Express Multiple Vulnerabilities (SQLi, XSS)

The remote host is using Calendar Express, a PHP web calendar. Vulnerabilities exist in this version that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser, and SQL injection. An attacker could exploit these flaws to use the remote host to...

HP-UX Security patch : PHSS_24946

The remote host is missing HP-UX Security Patch number PHSS24946 . Sec. Vulnerability in OV NNM %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16599; scriptversion"1.7";...

TeeKai Tracking Online XSS

The remote host runs Teekai Tracking Online, a PHP script used for tracking the number of users on a Web site. This version is vulnerable to cross-site scripting attacks. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the execution ...