Nmap NSE net: ms-sql-tables

Queries Microsoft SQL Server ms-sql for a list of tables per database. The sysdatabase table should be accessible by more or less everyone The script attempts to use the sa account over any other if it has the password in the registry. If not the first account in the registry is used. Once we hav...

MDVA-2010:210 : mysql

fix weird comma in init script output - Typo in init script %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

Max Anket v1.0 - Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ Max Anket v1.0 - Multiple Remote Vulnerabilities ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Researchers Find Hole in Quantum Cryptography

The Norwegian University of Science and Technology NTNU and the University of Erlangen-Nürnberg together with the Max Planck Institute for the Science of Light in Erlangen have recently developed and tested a technique exploiting imperfections in quantum cryptography systems to implement an attac...

Oscommerce Max v2.0.25 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ================================================================ Oscommerce Max v2.0.25 Changer Login and Pass CSRF Vulnerability ================================================================...

Oscommerce Max 2.0.25 Backup Related

==================================================== Oscommerce Max v2.0.25 by Pass / Creat and Download Backup Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Oscommerce Max v2.0.25 by Pass / Creat ; Download Backup Vulnerability

Exploit for php platform in category web applications ======================================================================== Oscommerce Max v2.0.25 by Pass / Creat and Download Backup Vulnerability ========================================================================...

Max CMS2. 0beta (maxcms)SQL injection and administrator authentication bypass vulnerability-vulnerability warning-the black bar safety net

This system was internally very popular video-on-demand system, before 1. 5 version vulnerability very much, the 2.0 version in terms of security has improved, but still there are loopholes exist. Look at the code \inc\ajax. asp dim action : action = getForm"action", "get" response. Charset="gbk"...

Max CMS2. 0beta (maxcms)SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

This system was internally very popular video-on-demand system, before 1. 5 version vulnerability very much, the 2.0 version in terms of security has improved, but still there are loopholes exist. Look at the code \inc\ajax. asp dim action : action = getForm"action", "get" response. Charset="gbk"...

PT-2010-3673 · Sblim · Sblim-Sfcb

Name of the Vulnerable Software and Affected Versions: SBLIM SFCB versions 1.3.4 through 1.3.7 Description: The issue is related to an integer overflow in the httpAdapter.c component of SBLIM SFCB. This occurs when the configuration sets httpMaxContentLength to a zero value, allowing remote...

maxphp video system vulnerabilities-vulnerability warning-the black bar safety net

play. php?& amp;m=1&n=1&id=1%cf’+and+1=2+union+select+1,concatadminname,0x20,password,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8+from+maxadmin%2 3 View to password, you can log in directly to the background...

Black Hat Barcelona: Facebook Set to Keynote

The Black Hat security conference will kick off next week in Barcelona, with training sessions and briefings from some of the most talented security researchers in the industry. Facebook’s chief security officer, Max Kelly, is scheduled for a keynote presentation on Wednesday morning following tw...

OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095...

OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095...

OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095...

Max Network Technology BBSMAX (threadid) Parameter XSS Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Max Network Technology BBSMAX threadid Parameter XSS Vulnerability ==================================================================== Vulnerable: Max Network Technology...

Cross site scripting

Cross-site scripting XSS vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

Max Network Technology BBSMAX 4.2 - threadid Cross-Site Scripting

Max Network Technology BBSMAX 4.2 - threadid Cross-Site Scripting source: https://www.securityfocus.com/bid/38630/info Max Network Technology BBSMAX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Max Network Technology BBSMAX 4.2 - 'threadid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38630/info Max Network Technology BBSMAX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

CVE-2010-0947

CVE-2010-0947 is a cross-site scripting (XSS) vulnerability affecting Max Network Technology BBSMAX versions 3.0, 4.1 and 4.2. The flaw exists in post.aspx and allows remote attackers to inject arbitrary web script or HTML via the action parameter. The NVD notes a MEDIUM severity (CVSS v2: AV:N/A...