9988 matches found
Mandriva Update for mdkonline MDKA-2007:063 (mdkonline)
Check for the Version of mdkonline OpenVAS Vulnerability Test Mandriva Update for mdkonline MDKA-2007:063 mdkonline Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
My Simple Forum 7.1 (LFI) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl My Simple Forum v7.1 Remote Command Execution Exploit Apache Log Poisoning/Injection Local File Inclusion at /theme/default/index.template.php?action=lf%00 XSS at /theme/default/index.template.php?Name=XSS - This needs Register Globals ON Credits ...
Format string
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in a Long Running Web Process LRWP request, which triggers incorrect...
Format string
Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in a URI that ends in 1 .ssi, 2 .shtm, or 3 .shtml,...
CVE-2008-6519
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in a Long Running Web Process LRWP request, which triggers incorrect...
Ubuntu Update for pidgin vulnerability USN-548-1
Ubuntu Update for Linux kernel vulnerabilities USN-548-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5481.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for pidgin vulnerability USN-548-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
RedHat Update for vsftpd RHSA-2008:0295-01
Check for the Version of vsftpd OpenVAS Vulnerability Test RedHat Update for vsftpd RHSA-2008:0295-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Update for vsftpd RHSA-2008:0295-01
Check for the Version of vsftpd OpenVAS Vulnerability Test RedHat Update for vsftpd RHSA-2008:0295-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Password is being logged for 500 errors
The user passwords are being exposed in the log files when a 500 error happens. The following Jira solved the problem for the information displayed in the user Browser: http://jira.atlassian.com/browse/CONF-12360...
Password is being logged for 500 errors
The user passwords are being exposed in the log files when a 500 error happens. The following Jira solved the problem for the information displayed in the user Browser: http://jira.atlassian.com/browse/CONF-12360...
Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
Looks like a very serious issue to me - it works on our ProFTPD 1.3.2rc2 Server latest stable on gentoo. 220 ProFTPD 1.3.2rc2 Server Pumpkin xx.xx.xx.xx USER ' and 1=2 union select 1,0x24312452565a583533784324716a304d4d6b4670426b4b486177644264756634392f,uid,gid,homedir,shell from ftp 331 Password...
Fedora Core 10 FEDORA-2009-1074 (sudo)
The remote host is missing an update to sudo announced via advisory FEDORA-2009-1074. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
RedHat Security Advisory RHSA-2009:0267
The remote host is missing updates announced in advisory RHSA-2009:0267. The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root with logging. A flaw was discovered in a way sudo handled group specifications in run as lists in the sudoe...
RHEL 5 : sudo (RHSA-2009:0267)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:0267 advisory. The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root with logging. A flaw was...
Moderate: Red Hat Security Advisory: sudo security update
An updated sudo package to fix a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The sudo superuser do utility allows system administrators to give certain users the ability to run...
[SECURITY] Fedora 10 Update: sudo-1.6.9p17-5.fc10
Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...
OneOrZero Helpdesk 1.6 Shell Upload Exploit
!/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what the file is uploaded. EXPLOIT WORK:...
BMC Patrol Agent format string vulnerability
Format string vulneerability in logging via version number...
CVE-2008-4315
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...
CVE-2008-4315
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...