5382 matches found
Rae Media INC Real Estate Single and Multi Agent System SQL Injection
Exploit for asp platform in category web applications ===================================================================== Rae Media INC Real Estate Single and Multi Agent System SQL Injection =====================================================================...
Rae Media INC Real Estate Single and Multi Agent System SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //\ //\ Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail :...
SuSE 11 Security Update : Apache 2 (SAT Patch Number 2293)
The following bugs have been fixed : - When using a multithreaded MPM Apache could leak memory of requests handled by a different thread when processing subrequests. CVE-2010-0434 - Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security,...
XSS in WPTouch wordpress plugin
Vulnerability ID: HTB22698 Reference: http://www.htbridge.ch/advisory/xssinwptouchwordpressplugin.html Product: WPTouch wordpress plugin Vendor: BraveNewCode Inc http://www.bravenewcode.com/ Vulnerable Version: 1.9.19.4 Vendor Notification: 16 November 2010 Vulnerability Type: XSS Cross Site...
phpvidz 0.9.5 - Administrative Credentials Disclosure
Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ phpvidz does not use a SQL database. Instead it uses a system of flat files to maintain application state. The administrative passwo...
FreeBSD Ports: FreeBSD
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: FreeBSD
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: FreeBSD
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Adobe Readies Patch for Critical Reader, Acrobat Flaws
Adobe Inc. said on Friday that it is planning to release an out-of-cycle update to fix critical security holes in its Reader and Acrobat products, including a fix for a newly disclosed hole that is already being exploited in the wild. In a post on the company’s Product Security Incident Response...
Sawmill Detection
Sawmill, a log analysis tool from Flowerfire Inc., is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50430; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Sawmill...
Solaris 10 (sparc) : 144536-02
SunOS 5.10: libc.so.1 patch. Date this patch was last updated by Sun : Oct/27/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...
Linux kernel RDS protocol vulnerability
Overview The RDS protocol implementation of Linux kernels 2.6.30 through 2.6.38-rc8 contain a local privilege escalation vulnerability. Description Kernel functions fail to properly check if a user supplied address exists in the user segment of memory. By providing a kernel address to a socket ca...
GNU C library dynamic linker expands $ORIGIN in setuid library search path
Overview Certain versions of glibc unsafely handle the $ORIGIN ELF substitution sequence which can be exploited to gain local privilege escalation. Description Tavis Ormandy's advisory states:"$ORIGIN is an ELF substitution sequence representing the location of the executable being loaded in the...
Adobe Shockwave Player - 'rcsL chunk' Memory Corruption
Abysssec Inc Public Advisory 1 Advisory information Title : Adobe Shockwave player rcsL chunk memory corruption Version : Adobe Shockwave player 11.5.8.612 latest on writing time Discovery : http://www.abysssec.com Vendor : http://www.adobe.com Impact : Critical Contact : shahin at abysssec.com ,...
Super Simple Blog Script Detection
The remote host is running Super Simple Blog Script, a web-based blogging application written in PHP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid50047; scriptversion"1.9";...
Exponent CMS 0.97 Cross Site Scripting / File Disclosure / Local File Inclusion / Shell Upload
Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...
Exponent CMS v0.97 Multiple Vulnerabilities
Exploit for php platform in category web applications =========================================== Exponent CMS v0.97 Multiple Vulnerabilities =========================================== Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source...
Exponent CMS 0.97 - Multiple Vulnerabilities
Exponent CMS 0.97 - Multiple Vulnerabilities Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1...
AdaptCMS 2.0.1 Beta - Remote File Inclusion (Metasploit)
/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' 'AdaptCMS 2.0.1 Beta Released Remote File Inclusion Exploit', 'Description' = %q This module can be used to exploit Remote File...
OrangeHRM Detection
This host is running OrangeHRM, a Human Resource management and development system. OpenVAS Vulnerability Test $Id: gborangehrmdetect.nasl 5735 2017-03-27 12:27:20Z cfi $ OrangeHRM Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software;...