Flatpress 0.909.1 - Persistent Cross-Site Scripting

Title: FlatPress 0.909.1 Stored XSS Vendor: http://www.flatpress.org Dork: "powered by FlatPress" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability32.htm Thanks:...

Get User without Password and User which have an PW and days since last Pasword change

This plugin uses ssh to get User without Password and User which have an PW and days since last Pasword change. If the testuser have no access to /etc/shadow an KB entry will set. OpenVAS Vulnerability Test $Id: GSHBSSHpasswords.nasl 7279 2017-09-26 13:40:36Z cfischer $ Get User without Password...

Last Wizardz SQL Injection

Last Wizardz content.php Sql Injection Vulnerability ======================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Last Wizardz .:. Donwload Script: http://lastwiz.com/ .:...

Last Wizardz - 'id' SQL Injection

source: https://www.securityfocus.com/bid/39968/info Last Wizardz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Microsoft Windows: Last Access Timestamp'

Read the status of NTFS MAC SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96047";...

Read the status of NTFS MAC 'Last Access Timestamp' over WMI (Windows)

Read the status of NTFS MAC 'Last Access Timestamp' over WMI Windows. OpenVAS Vulnerability Test $Id: GSHBWMILastAccessTimestamp.nasl 7061 2017-09-05 11:50:40Z teissa $ Read the status of NTFS MAC 'Last Access Timestamp' over WMI Windows Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbon...

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows Vista (Windows)

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows VistaWin. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94247 Diese Prüfung bezieht sich...

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows Vista - Windows

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows VistaWin. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94247 Diese Prüfung bezieht sich...

CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities

CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input...

CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities

Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...

DEBIAN-CVE-2009-4499

SQL injection vulnerability in the gethistorylastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands via a crafted request, possibly related to the sendhistorylastid function in zabbixserver/trapper/nodehistory.c...

Paul Roberts on the Decade in Security

Dennis Fisher talks with Paul Roberts of The 451 Group about the changes that the last decade has brought in computer security, the biggest story of the ’00s and what the Teens might hold. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Solaris 10 (x86) : 142901-15

SunOS 5.10x86: kernel patch. Date this patch was last updated by Sun : Jul/26/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Microsoft RPC DCOM Interface Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft RP...

Solaris 8 (sparc) : 142294-01

SunOS 5.8: whodo w uptime patch. Date this patch was last updated by Sun : Oct/30/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

SystemTap Version Detection

This script detects the installed version of SystemTap and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodsystemtapdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ SystemTap Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.com This program...

Solaris 10 (sparc) : 141026-14

SunOS 5.10: print patch. Date this patch was last updated by Sun : Jul/09/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Spider Solitaire PoC

No description provided by source. ?php / Spider Solitaire Windows XP SP2 Local Crash PoC By SirGod www.insecurity.ro www.twitter.com/SirGod Loading a corrupt save filespider.sav will result in a local crash of Spider Solitaire / $username="pwn"; //Replace with your computer username...

SuSE Security Summary SUSE-SR:2009:014

The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Solaris 10 (x86) : 141779-05

SunOS 5.10x86: lp patch. Date this patch was last updated by Sun : Jul/30/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...