CVE-2005-2199: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the configpparootpath variable...

Hydra: MySQL

This plugin runs Hydra to find MySQL accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

CVE-2004-2195: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter...

CVE-2005-2154: Undefined Security Weakness

PHP local file inclusion vulnerability in 1 view.php and 2 open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter...

[Full-disclosure] Denial of Service Vulnerability in True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051.

Summary: Denial of Service Vulnerability in True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051. http://www.tnsoft.com/ Details: Input to the IMAP4 LIST command is not properly checked and/or filtered. Issuing a single character 'x' as the second argument to the...

IA eMailServer Corporate Edition Version <= 5.2.2 DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================= IA eMailServer Corporate Edition Version IAeMailServerDOS.pl 127.0.0.1 True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051. Download:...

linux-realplayer -- RealText parsing heap overflow

An iDEFENSE Security Advisory reports: Remote exploitation of a heap-based buffer overflow vulnerability in the RealText file format parser within various versions of RealNetworks Inc.'s RealPlayer could allow attackers to execute arbitrary code...

fusionBB.txt

GulfTech Security Research June 6th, 2005 Vendor : InteractivePHP, Inc URL : http://www.fusionbb.com/ Version : Version .11 Beta And Earlier Risk : Multiple Vulnerabilities Description: FusionBB is a popular online message board written in php and developed by InteractivePHP, INC. There are sever...

FusionBB Multiple Vulnerabilities

GulfTech Security Research June 6th, 2005 Vendor : InteractivePHP, Inc URL : http://www.fusionbb.com/ Version : Version .11 Beta And Earlier Risk : Multiple Vulnerabilities Description: FusionBB is a popular online message board written in php and developed by InteractivePHP, INC. There are sever...

[AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 BEA WebLogic Administration Console error page cross-site scripting vulnerability AppSecInc Team SHATTER Security Advisory BEA05-V0100 http://www.appsecinc.com/resources/alerts/general/BEA-001.html May 27, 2005 Affected versions: BEA WebLogic Server 7...

[CAN-2005-1062] Administration protocol abuse allows local/remote password cracking

Secure Computer Group - University of A Coruna http://research.tic.udc.es/scg/ -- x -- dotpi.com Information Technologies Research Labs http://www.dotpi.com ID: 20050429-1 Document title: Administration protocol abuse allows local/remote password cracking Document revision: 1.0 Coordinated releas...

[AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SQL Injection in CREATESCNCHANGESET procedure AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle/2005-05.html April 18, 2005 Affected versions: Oracle Database Server version 10g Risk level: High Credits: This...

[AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple SQL Injection vulnerabilities in DBMSMETADATA package AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle/2005-03.html April 18, 2005 Affected Versions: Oracle Database Server versions 9i and 10g Risk...

Solaris 9 (x86) : 117470-09

SunOS 5.9x86: tcp Patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Serendipity Detection

Serendipity, a PHP-based blog application, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18054; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Serendipity Detection";...

MS Windows (WINS) Remote Buffer Overflow Exploit (v.3)

No description provided by source. / Windows Internet Name Service WINS Remote Heap Buffer Overflow ------------------------------------ ------------------------------------ Advisory credits: ---------------- Nicolas Waisman of Immunity Inc. www.immunitysec.com Advisory link: ----------------...

phpCoin.txt

GulfTech Security Research March 28th, 2005 Vendor : COINSoft Technologies Inc. URL : http://www.phpcoin.com/ Version : phpCoin v1.2.1b && Earlier Risk : Multiple Vulnerabilities Description: phpCoin is a free software package originally designed for web-hosting resellers to handle clients, order...

Microsoft Windows SMB Registry : Windows 2003 Server Service Pack Detection

It is possible to determine the Service Pack version of the Windows 2003 system. by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17662; scriptversion"1.35";...

Multiple phpCoin Vulnerabilities

GulfTech Security Research March 28th, 2005 Vendor : COINSoft Technologies Inc. URL : http://www.phpcoin.com/ Version : phpCoin v1.2.1b && Earlier Risk : Multiple Vulnerabilities Description: phpCoin is a free software package originally designed for web-hosting resellers to handle clients, order...

iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client env_opt_add&#40;&#41; Buffer Overflow Vulnerability

Multiple Telnet Client envoptadd Buffer Overflow Vulnerability iDEFENSE Security Advisory 03.28.05 www.idefense.com/application/poi/display?id=221&type=vulnerabilities March 28, 2005 I. BACKGROUND The TELNET protocol allows virtual network terminals to be connected to over the internet. The initi...