12221 matches found
By the LFI caused by the Zimbra mail management system of 0day-vulnerability warning-the black bar safety net
Zimbra is a company with a lot of the mail system, may relate to many of the company's internal confidential, it is extremely important. This is a few days ago on exploit-db. com on the issue to the 0day to: it. By a local file inclusion vulnerability can be seen localconfig. xml content, and thi...
CVE-2014-0400
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server...
CVE-2014-0400
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server...
CVE-2014-0400
CVE-2014-0400 affects Oracle Fusion Middleware’s Oracle Internet Directory (OID) LDAP server in versions 11.1.1.6 and 11.1.1.7, described as an unspecified vulnerability that allows remote authenticated users to compromise confidentiality via the OID LDAP server. Concrete connected documents prov...
[SECURITY] Fedora 18 Update: 389-ds-base-1.3.0.9-1.fc18
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)
A local file include vulnerability has been reported in Zimbra Collaboration Server. The vulnerability is due to insufficient validation of user-supplied input. A remote attacker can exploit this vulnerability to retrieve sensitive information like LDAP root credentials...
VMware Security Updates for vCenter Server (VMSA-2013-0006)
VMware has updated vCenter Server to address multiple security vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VMware Security Updates for vCenter Server (VMSA-2013-0006)
VMware has updated vCenter Server to address multiple security vulnerabilities. OpenVAS Vulnerability Test $Id: gbvcenterVMSA-2013-0006.nasl 6637 2017-07-10 09:58:13Z teissa $ VMware Security Updates for vCenter Server VMSA-2013-0006 Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone...
[THC-Hydra v7.6] Fast Parallel Network Logon Cracker
Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...
ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability
ESA-2013-072.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability EMC Identifier: ESA-2013-072 EMC Identifier: NW152441 CVE Identifier: CVE-2013-3285 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products...
Serv-U FTP Server < 15.0.0.0 Multiple Security Vulnerabilities
According to its banner, the installed version of Serv-U is a version prior to version 15.0.0.0. It is, therefore, potentially affected by multiple vulnerabilities : - An unspecified error exists related to SSL that can be exploited to cause a denial of service. - An unspecified error exists when...
Zimbra Collaboration Server LFI Vulnerability
This Metasploit module exploits a local file inclusion on Zimbra 8.0.2 and 7.2.2. The vulnerability allows an attacker to get the LDAP credentials from the localconfig.xml file. The stolen credentials allow the attacker to make requests to the service/admin/soap API. This can then be used to crea...
Zimbra Collaboration Server 7.2.2/8.0.2 - Local File Inclusion (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'Zimbra Collaboration Server LFI', 'Description' = %q This module exploits a local file inclusion on Zimbra...
Zimbra Collaboration Server LFI
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'Zimbra Collaboration Server LFI', 'Description' = %q This module exploits a local file inclusion on Zimbra...
[THC-Hydra 7.5] Fast Parallel Network Logon Cracker
Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...
Critical: php
Issue Overview: The asn1timetotimet function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse 1 notBefore and 2 notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2013-1364
The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...
CVE-2013-1364
The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...
