GreenBrowser 6.1.x Cross Site Scripting

GreenBrowser About: dialog XSS and stored XSS Vendor URL:http://www.morequick.com/ advisore:http://lostmon.blogspot.com/2012/03/greenbrowser-about-dialog-xss-and.html Vendor notify:NO exploit available:yes GreenBrowser is your best choice of flexible and powerful green web browser. GreenBrowser i...

Wordpress LISL Last Image Slider 1.0 File Upload

File upload vulnerability in Wordpress LISL Last Image Slider plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

DEF-CON Chennai 4 (DC602028) Call for Paper [January Meet]

DEF-CON Chennai 4 DC602028 Call for Paper January Meet The DC602028 aka DEF-CON Chennai Group is a group located at Chennai in India. The DC group was created on December 2010 from then DEF-CON Chennai had been the platform for Internet and Mobile security.DEF-CON Chennai is for everyone,we don't...

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows Vista (Windows)

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows VistaWin. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94247 Diese Prüfung bezieht sich...

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows Vista - Windows

IT-Grundschutz M4.342: Aktivierung des Last Access Zeitstempels unter Windows VistaWin. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94247 Diese Prüfung bezieht sich...

Time of Last System Startup

Using the supplied credentials, Nessus was able to determine when the host was last started. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56468; scriptversion"1.7"; scriptcvsdate"Date: 2018/06/19 13:32:15"; scriptnameenglish:"Time of Last System Startup";...

PT-2011-1809

Name of the Vulnerable Software and Affected Versions NinkoBB version 1.3 RC5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters, including first name, last...

PT-2011-4629

Name of the Vulnerable Software and Affected Versions Freeway version 1.5 Alpha Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as templates/Freeway/boxes/last product.php, which reveals t...

BlogPHP 2 Cross Site Scripting

Title : BlogPHP v2 search Xss Vulnerbility + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Software : http://amhserver.com/37/ & http://www.metjar.com/ + Tested on : L:Vista & Windows Xp and...

Sify.com hacked with SQL Injection Vulnerability

Sify.com hacked with SQL Injection Vulnerability Sify's website contain SQL injection Vulnerability and Hackers are able to Database Access, Database Dump, Possibility of shell uploading. Sify is one of India's leading integrated Information Communications Technology companies. Sify was one of th...

Solaris 9 (sparc) : 147264-01

SunOS 5.9: in.fingerd patch. Date this patch was last updated by Sun : Jul/06/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Lulzsec Releases Final Message to the friends around the globe

Lulzsec Releases Final Message to the friends around the globe Anonymous Tweet Video message as "Lulzsec Last Message". In 10minutes the Video get 200 Likes and 7000 Views. Every message of Anonymous/ Lulzsec is spreading like Fire. The Video Message is here : Lulzsec Message is : Friends around...

Solaris 10 (x86) : 145199-01

SunOS 5.10x86: ehci patch. Date this patch was last updated by Sun : Jun/22/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/02/25. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

kernel security and bug fix update

2.6.32-71.24.1.el6 - fs Revert 'fs inotify: stop kernel memory leak on file creation failure' Eric Paris 656831 656832 CVE-2010-4250 2.6.32-71.23.1.el6 - x86 Revert 'x86 mtrr: Assume SYSCFGTom2ForceMemTypeWB exists on all future AMD CPUs' Frank Arnold 683813 652208 2.6.32-71.22.1.el6 - rebuild...

Pushdo/Cutwail: August, 2010

One of the world’s most prolific botnets and a leading source of spam, denial of service attacks and malware, Pushdo was brought down by researchers at the security firm Last Line of Defense, who worked with hosting providers to seize 30 command-and-control servers involved in the botnet...

Solaris 10 (sparc) : 145044-03

SunOS 5.10: ksh pfksh rksh xargs sh patch. Date this patch was last updated by Sun : Apr/01/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Longshine Multiple Print Servers - Cross-Site Scripting

GotGeek Labs http://www.gotgeek.com.br/ Longshine Multiple Print Servers Cross-site Scripting Vulnerability + Description LCS-PS110: The LCS-PS110 Parallel-Port-Printserver enables you to share your printer in the whole network from every workstation. This multiprotocol printserver supports the...

Solaris 10 (sparc) : 146279-01

SunOS 5.10: uucp patch. Date this patch was last updated by Sun : Dec/22/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/11/14. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

XWiki Watch Multiple Cross Site Scripting Vulnerabilities

This host is running XWiki Watch and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikiwatchmultxssvuln.nasl 7276 2017-09-26 11:59:52Z cfischer $ XWiki Watch Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c...

kernel: sctp memory corruption in HMAC handling

The sctpauthasocgethmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmacids array of an SCTP peer, which allows remote attackers to cause a denial of service memory corruption and panic via a crafted value in the last element of this array...