2756 matches found
Apple QuickTime Multiple Vulnerabilities - Jan09 (Windows)
The host is installed with Apple QuickTime and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplequicktimemultvulnjan09win.nasl 6519 2017-07-04 14:08:14Z cfischer $ Apple QuickTime Multiple Vulnerabilities - Jan09 Windows Authors: Chandan S Copyright: Copyright c 20...
TFTPUtil GUI TFTP Server Denial of Service Vulnerability
Title: TFTPUtil GUI TFTP Directory Traversal Product: TFTPUtil GUI Discovered: November 26, 2008 Discovered by: Rob Kraus, princeofnigeria PoN Vendor: k23productions Vendor URL: http://sourceforge.net/projects/tftputil Vendor notification date: December 1, 2008 Vendor response date: December 8,...
metrica-xss.txt
Metrica Service Assurance Multiple Cross Site Scripting Author: Francesco Bianchino Email: [email protected] Title: Metrica Service Assurance Multiple Cross Site Scripting Vendor: IBM Summary Metrica Service Assurance Framework implements a distributed, object-oriented, J2EE-based architectur...
Gentoo Security Advisory GLSA 200410-13 (bnc)
The remote host is missing updates announced in advisory GLSA 200410-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Hyper NIKKI System allows unauthorized email submission
Overview Hyper NIKKI System hns is web log software from the Hyper NIKKI System Project. hns allows unauthorized email submission as it does not validate inputs properly. Impact An attacker could use the server to send unauthorized emails. In addition, when the server provides email service, the...
netpbm security update
CentOS Errata and Security Advisory CESA-2008:0131 Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a...
RHEL 2.1 / 3 / 4 : netpbm (RHSA-2008:0131)
Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions for editing and converting betwee...
CentOS 3 / 4 : netpbm (CESA-2008:0131)
Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions for editing and converting betwee...
CentOS 3 : tcltk (CESA-2008:0134)
Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed for embedding into other applications and for use...
kvaliitti-sql.txt
Found by: Jaakko "Chrysalid" Hartikainen 1. Info Kvaliitti WebDoc 3.0 CMS is a proprietary Finnish-made content management system developed by Kvaliitti Oy http://www.kvaliitti.fi. It is driven by MS SQL Server and ASP. 2. Abstract WebDoc 3.0 suffers from a flaw in input validation, which allows...
gcaldaemon-dos.txt
Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...
Messageriescripthp 2.0 - existeemail.php?email Cross-Site Scripting
Messageriescripthp 2.0 - existeemail.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...
DEBIAN-CVE-2006-1354
Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service server crash via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module...
cijfer-mnxpl.pl.txt
!/usr/bin/perl Magic News Plus All rights reserved. An input validation flaw exists within 'settings.php' of Magic News Plus which can lead to the changing of the administrative password. Here is where the problem is line 108 of 426: ... 1 elseif $action == "change" ... 2 if $passwd !=...
Magic News Plus 1.0.3 - Admin Pass Change
Magic News Plus 1.0.3 - Admin Pass Change !/usr/bin/perl Magic News Plus All rights reserved. An input validation flaw exists within 'settings.php' of Magic News Plus which can lead to the changing of the administrative password. Here is where the problem is line 108 of 426: ... 1 elseif $action ...
Magic News Plus <= 1.0.3 Admin Pass Change Exploit
Exploit for unknown platform in category web applications ================================================== Magic News Plus All rights reserved. An input validation flaw exists within 'settings.php' of Magic News Plus which can lead to the changing of the administrative password. Here is where t...
Magic News Plus 1.0.3 - Admin Pass Change
!/usr/bin/perl Magic News Plus All rights reserved. An input validation flaw exists within 'settings.php' of Magic News Plus which can lead to the changing of the administrative password. Here is where the problem is line 108 of 426: ... 1 elseif $action == "change" ... 2 if $passwd !=...
Magic News Plus <= 1.0.3 Admin Pass Change Exploit
No description provided by source. !/usr/bin/perl Magic News Plus =1.0.3 Admin Pass Change Exploit Copyright c 2006 cijfer [email protected] All rights reserved. An input validation flaw exists within 'settings.php' of Magic News Plus which can lead to the changing of the administrative password...
JGS-Portal Multiple XSS and SQL injection Vulnerabilities
The remote host is running the JGS-Portal, a web portal written in PHP. The remote version of this software contains an input validation flaw leading multiple SQL injection and XSS vulnerabilities. An attacker may exploit these flaws to execute arbirtrary SQL commands against the remote database...
Advanced Guestbook index.php SQL Injection Vulnerability
Advanced Guestbook is prone to an input validation flaw leading to an SQL injection vulnerability. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...