HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service

!/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software: http://h71028.www7.hp.com/enterprise/w1/en/software/information-management-data-protector.html Date: 08/01/2011 Author...

PhpGedView 4.2.3 - Local File Inclusion

PhpGedView 4.2.3 - Local File Inclusion !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com PhpGedView = 4.2.3 Local File Inclusion Vulnerability Script:...

Fedora Update for perl-IO-Socket-SSL FEDORA-2010-19058

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for perl-IO-Socket-SSL FEDORA-2010-19054

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for perl-IO-Socket-SSL FEDORA-2010-19058

Check for the Version of perl-IO-Socket-SSL OpenVAS Vulnerability Test Fedora Update for perl-IO-Socket-SSL FEDORA-2010-19058 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for perl-IO-Socket-SSL FEDORA-2010-19054

Check for the Version of perl-IO-Socket-SSL OpenVAS Vulnerability Test Fedora Update for perl-IO-Socket-SSL FEDORA-2010-19054 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora 14 : perl-IO-Socket-SSL-1.37-1.fc14 (2010-19058)

This update fixes a problem whereby IO::Socket::SSL fell back to the 'VERIFYNONE' verification mode if another verification mode was defined but no valid cafile or capath was provided. The updated version throws an error in that situation rather than proceeding with the connection despite being...

Fedora 13 : perl-IO-Socket-SSL-1.37-1.fc13 (2010-19054)

This update fixes a problem whereby IO::Socket::SSL fell back to the 'VERIFYNONE' verification mode if another verification mode was defined but no valid cafile or capath was provided. The updated version throws an error in that situation rather than proceeding with the connection despite being...

[SECURITY] Fedora 14 Update: perl-IO-Socket-SSL-1.37-1.fc14

This module is a true drop-in replacement for IO::Socket::INET that uses SSL to encrypt data before it is transferred to a remote server or client. IO::Socket::SSL supports all the extra features that one needs to write a full-featured SSL client or server application: multiple SSL contexts, ciph...

Virtual Store Open 3.0 - Acess SQL Injection

!/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug: Acess Sql Injection Found: Br0ly google dork:...

NProtect Anti-Virus 2007 Privilege Escalation

NProtect Anti-Virus 2007 with TKRgAc2k.sys FsContext for each process to open the device,and save key/key value /virus name /event object in FsContext. Here contains a design error , if a registry operation is intercepted and match the rules , but event handle has not been set, TKAcRg2k.sys will...

Altarsoft Audio Converter 1.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits Exploit Title: Exploit Buffer Overflow Altarsoft Audio Converter 1.1SEH Date: 16/12/2010 Author: C4SS!0 G0M3S Software Link: http://www.altarsoft.com/downloads/AltarsoftAudioConverter.exe Version: 111 Tested on: WIN-XP SP3 PT-BR CVE: N/A...

stuxnet-detect NSE Script

Detects whether a host is infected with the Stuxnet worm . An executable version of the Stuxnet infection will be downloaded if a format for the filename is given on the command line. See also: smb-vuln-ms10-061.nse Script Arguments stuxnet-detect.save Path to save Stuxnet executable under, with ...

Exim 4.63 - Remote Command Execution

Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as "trojanurl" and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print "Usage: $0 Host Port \n\n"; die "Ex: $0...

Exim 4.63 - Remote Command Execution

Exim 4.63 - Remote Command Execution Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as "trojanurl" and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print...

kernel: drivers/serial/serial_core.c: reading uninitialized stack memory

The uartgetcount function in drivers/serial/serialcore.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call...

Perl IO::Socket::SSL 'verify_mode' Security Bypass Vulnerability

The IO::Socket::SSL module for Perl is prone to a security-bypass vulnerability. Successfully exploiting this issue allows attackers to bypass certain security restrictions, which may aid in spoofing attacks. Versions prior to IO::Socket::SSL 1.35 are vulnerable. OpenVAS Vulnerability Test $Id:...

Oracle Secure Backup Administration preauth variable command injection

Added: 12/06/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 67128 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the Administration server allows remote, authenticated attackers to execute arbitrary commands which are...

Oracle Secure Backup Administration preauth variable command injection

Added: 12/06/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 67128 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the Administration server allows remote, authenticated attackers to execute arbitrary commands which are...

Oracle Secure Backup Administration preauth variable command injection

Added: 12/06/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 67128 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the Administration server allows remote, authenticated attackers to execute arbitrary commands which are...