10151 matches found
Mandriva Update for shared-mime-info MDVA-2008:118 (shared-mime-info)
Check for the Version of shared-mime-info OpenVAS Vulnerability Test Mandriva Update for shared-mime-info MDVA-2008:118 shared-mime-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
IBM Bladecenter Advanced Management Module 1.42 - '/private/file_Management.ssi?PATH' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...
Mandriva Update for shared-mime-info MDKA-2007:050 (shared-mime-info)
Check for the Version of shared-mime-info OpenVAS Vulnerability Test Mandriva Update for shared-mime-info MDKA-2007:050 shared-mime-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
Mandriva Update for hal-info MDVA-2008:073 (hal-info)
Check for the Version of hal-info OpenVAS Vulnerability Test Mandriva Update for hal-info MDVA-2008:073 hal-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for hal-info MDKA-2007:070 (hal-info)
Check for the Version of hal-info OpenVAS Vulnerability Test Mandriva Update for hal-info MDKA-2007:070 hal-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for hal-info MDVA-2008:060 (hal-info)
Check for the Version of hal-info OpenVAS Vulnerability Test Mandriva Update for hal-info MDVA-2008:060 hal-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)
The getinputtoken function in the SPNEGO implementation in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote attackers to cause a denial of service daemon crash and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read...
CVE-2008-6644
Cross-site scripting XSS vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
FlexCMS Calendar Blind SQL Injection
FlexCMS CalendarItemId Blind SQL Injection Vulnerability AUTHOR: MisterRichard Developer site: http://www.flexcms.dk/ Admin login site: http://target.com/flexadmin/ = Vulnerability author : Lanti-Net = Contact: lanti-netathotmaildotcom = Site : www.khg-crew.ws = Greetz: SpYrO , boom3rang, KHG,...
CVE-2009-1214
CVE-2009-1214 affects GNU screen 4.0.3, which creates the /tmp/screen-exchange temporary file with world-readable permissions, enabling local users to potentially obtain sensitive session information (confidentiality impact: COMPLETE). The issue is local, due to permissive file mode, and is corro...
Ubuntu Update for libcdio vulnerability USN-580-1
Ubuntu Update for Linux kernel vulnerabilities USN-580-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5801.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libcdio vulnerability USN-580-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CDex 1.70b2 Buffer Overflow
Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00". //granularposition "\x66\x07\x00\x00"...
Advanced Image Hosting (AIH) 2.3 (gal) Blind SQL Injection Vuln
No description provided by source. Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image...
[SECURITY] Fedora 9 Update: evolution-data-server-2.22.3-3.fc9
The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...
CDex 1.70b2 (.ogg) Local Buffer Overflow Exploit (xp/ sp3)
Exploit for unknown platform in category local exploits ========================================================== CDex 1.70b2 .ogg Local Buffer Overflow Exploit xp/ sp3 ========================================================== Tools - Media file Player - Select files - Browse to a folder - - Op...
Kim Websites 1.0 Download Backup / Info Disclosure
Kim Websites 1.0 Download Backup/PHPInfo Disclosure + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download Backup - Go to backup folder.No restricting index or htaccess : http://127.0.0.1/path/admin/backups/ PoC : http://127.0.0.1/path/admin/backups/mysqlbeurstip20Nov2006.SQL +...
JIRA build information not included in dummy XML responses to search filter requests which users do not have access to
The build-info element is missing from the response to search filter XML requests. noformat https://support.atlassian.com/sr/jira.issueviews:searchrequest-xml/10593/SearchRequest-10593.xml?tempMax=100 noformat Happens if the user does not have access to the filter. See also...
JIRA build information not included in dummy XML responses to search filter requests which users do not have access to
The build-info element is missing from the response to search filter XML requests. noformat https://support.atlassian.com/sr/jira.issueviews:searchrequest-xml/10593/SearchRequest-10593.xml?tempMax=100 noformat Happens if the user does not have access to the filter. See also...
Unfixed XSS vulnerability at www.007.info
Security researcher bho, has submitted on 03/04/2009 a cross-site-scripting XSS vulnerability affecting www.007.info, which at the time of submission ranked 1532828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currently...
