5382 matches found
Fedora Update for pidgin FEDORA-2012-8686
Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-8686 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Cobbler xmlrpc API power_system Method Remote Shell Command Execution
According to its self-reported version, the Cobbler install on the remote host is affected by a command injection vulnerability that can be exploited by sending a specially crafted username or password argument to the 'powersystem' method. Successful exploitation requires an authenticated user an...
DDIVRT-2012-44 Epicor Returns Management SOAP-Based Blind SQL Injection
Title ----- DDIVRT-2012-44 Epicor Returns Management SOAP-Based Blind SQL Injection Severity -------- High Date Discovered --------------- April 12, 2012 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Chris Graham and r@b13$ Vulnerability Description...
Debian Security Advisory DSA 2465-1 (php5)
The remote host is missing an update to php5 announced via advisory DSA 2465-1. OpenVAS Vulnerability Test $Id: deb24651.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2465-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian Security Advisory DSA 2475-1 (openssl)
The remote host is missing an update to openssl announced via advisory DSA 2475-1. OpenVAS Vulnerability Test $Id: deb24751.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2475-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Serco: 'Sophisticated' Attack On U.S. Govt. Pension Plan Nets Info On 123k
Serco Inc., a well-known contractor working with the U.S. government, announced that it was the target of a sophisticated attack that exposed data on 123,000 civil employees of the Federal government and their families, including names, addresses and social security numbers taken from the company...
OpenOffice - OLE Importer DocumentSummaryInformation Stream Handling Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "OpenOffice OLE Importer...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5605)
This kernel security update fixes lots of bugs and some %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid59130; scriptversion"1.5";...
SQL Injection and other issues in Micro Technology Services, Inc. Lynx
Summary The Micro Technology Services Inc. "Lynx Message Server 7.11.10.2" and/or "LynxTCPService version 1.1.62" web interface is vulnerable to SQL Injection, Cross-Site Scripting, and other security problems. 2. Description Lynx is a "Facility wide Duress and Emergency Notification" system...
Lynx Message Server - Multiple Vulnerabilities
Lynx Message Server - Multiple Vulnerabilities 1. Summary The Micro Technology Services Inc. "Lynx Message Server 7.11.10.2" and/or "LynxTCPService version 1.1.62" web interface is vulnerable to SQL Injection, Cross-Site Scripting, and other security problems. 2. Description Lynx is a "Facility...
Comodo Internet Security < 5.10 kernel ImageBase Executable Handling Remote DoS
The version of Comodo Internet Security installed on the remote Windows host is affected by a denial of service vulnerability due to the way the application handles specially crafted 32-bit Portable Executable PE files with a kernel ImageBase value. C Tenable Network Security, Inc...
Debian Security Advisory DSA 2437-1 (icedove)
The remote host is missing an update to icedove announced via advisory DSA 2437-1. OpenVAS Vulnerability Test $Id: deb24371.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2437-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Oracle Enterprise Manager SQL injection Vulnerability
Exploit for jsp platform in category web applications -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager compareWizFirstConfig web page. Risk Level: High Affected versions: Oracle Enterprise Manager Database Control...
Oracle Enterprise Manager compareWizFirstConfig SQL injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager compareWizFirstConfig web page. Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2 and previous patchsets Oracle...
MySQL 5.5.20 Unspecified RCE Vulnerability
MySQL is prone to an unspecified remote code execution RCE vulnerability. This VT has duplicated the VT MySQL SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
SuSE 10 Security Update : Samba (ZYPP Patch Number 8058)
A remote code execution flaw in Samba has been fixed : - PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size. CVE-2012-1182 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...
Lenovo ThinkManagement Console Detection
Lenovo ThinkManagement Console, a web-based API for Lenovo ThinkManagement, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58653; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lenovo ThinkManagement Console...
Microsoft Visual FoxPro Installed
Microsoft Visual FoxPro, an IDE for the Visual FoxPro programming language, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58645; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31";...
ZTE - Change Admin Password
Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password------------------------------------------------------Contact...
IrfanView < 4.33 Boundary Error Multiple Image File Handling Remote Overflow
The remote Windows host contains a version of IrfanView earlier than 4.33. As such, it is reportedly affected by a heap-based buffer overflow vulnerability due to the way the application handles RLE compressed bitmap files. An attacker could trick a user into opening specially crafted DIB, RLE, o...