Apple QuickTime for Windows文件系统权限本地信息泄露漏洞

BUGTRAQ ID: 45237 CVE ID: CVE-2010-0530 Apple QuickTime是一款非常流行的多媒体播放器。 Apple QuickTime在实现上存在漏洞，攻击者可利用此漏洞获取敏感信息，访问用户配置文件中"Apple Computer" 目录下的内容。 此漏洞源于文件系统权限问题。 Apple QuickTime Player 5.0.2 - 7.6.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

IceWarp Webmail Detection

The remote web server hosts IceWarp, a webmail application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51097; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"IceWarp Webmail Detection"; scriptsummaryenglish:"Checks for IceWarp Webmail";...

Rae Media INC Real Estate Single and Multi Agent System SQL Injection

Exploit for asp platform in category web applications ===================================================================== Rae Media INC Real Estate Single and Multi Agent System SQL Injection =====================================================================...

kernel-2.6.18.194 */*e15 */* 2010 Local Root Exploit

Exploit for linux platform in category local exploits ==================================================== kernel-2.6.18.194 /e15 / 2010 Local Root Exploit ==================================================== Author: Hackeri-AL Email : h-al at hotmail dot it Group : UAH / United ALBANIA Hackers W...

Rae Media INC Real Estate Single and Multi Agent System SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //\ //\ Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail :...

SuSE 11 Security Update : Apache 2 (SAT Patch Number 2293)

The following bugs have been fixed : - When using a multithreaded MPM Apache could leak memory of requests handled by a different thread when processing subrequests. CVE-2010-0434 - Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security,...

XSS in WPTouch wordpress plugin

Vulnerability ID: HTB22698 Reference: http://www.htbridge.ch/advisory/xssinwptouchwordpressplugin.html Product: WPTouch wordpress plugin Vendor: BraveNewCode Inc http://www.bravenewcode.com/ Vulnerable Version: 1.9.19.4 Vendor Notification: 16 November 2010 Vulnerability Type: XSS Cross Site...

phpvidz 0.9.5 - Administrative Credentials Disclosure

Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ phpvidz does not use a SQL database. Instead it uses a system of flat files to maintain application state. The administrative passwo...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Readies Patch for Critical Reader, Acrobat Flaws

Adobe Inc. said on Friday that it is planning to release an out-of-cycle update to fix critical security holes in its Reader and Acrobat products, including a fix for a newly disclosed hole that is already being exploited in the wild. In a post on the company’s Product Security Incident Response...

Sawmill Detection

Sawmill, a log analysis tool from Flowerfire Inc., is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50430; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Sawmill...

Solaris 10 (sparc) : 144536-02

SunOS 5.10: libc.so.1 patch. Date this patch was last updated by Sun : Oct/27/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

GNU C library dynamic linker expands $ORIGIN in setuid library search path

Overview Certain versions of glibc unsafely handle the $ORIGIN ELF substitution sequence which can be exploited to gain local privilege escalation. Description Tavis Ormandy's advisory states:"$ORIGIN is an ELF substitution sequence representing the location of the executable being loaded in the...

Linux kernel RDS protocol vulnerability

Overview The RDS protocol implementation of Linux kernels 2.6.30 through 2.6.38-rc8 contain a local privilege escalation vulnerability. Description Kernel functions fail to properly check if a user supplied address exists in the user segment of memory. By providing a kernel address to a socket ca...

Adobe Shockwave Player - 'rcsL chunk' Memory Corruption

Abysssec Inc Public Advisory 1 Advisory information Title : Adobe Shockwave player rcsL chunk memory corruption Version : Adobe Shockwave player 11.5.8.612 latest on writing time Discovery : http://www.abysssec.com Vendor : http://www.adobe.com Impact : Critical Contact : shahin at abysssec.com ,...

Super Simple Blog Script Detection

The remote host is running Super Simple Blog Script, a web-based blogging application written in PHP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid50047; scriptversion"1.9";...

Exponent CMS 0.97 Cross Site Scripting / File Disclosure / Local File Inclusion / Shell Upload

Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...

Exponent CMS v0.97 Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Exponent CMS v0.97 Multiple Vulnerabilities =========================================== Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source...