CVE-2013-0212

store/swift.py in OpenStack Glance Essex 2012.1, Folsom 2012.2 before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive...

Ubuntu: Security Advisory (USN-1710-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

osCommerce Authentication Bypass (misconfigured htaccess)

Exploit for php platform in category web applications Exploit Title : osCommerce Authentication Bypass misconfigured htaccess Google Dork : "Powered by osCommerce" or you can try own dorks Exploit Author: D35m0nd142 Vendor Homepage: http://www.oscommerce.com/ Tested on: Linux Ubuntu 12.04 with...

FreeBSD : dns/bind9* -- Heavy DNSSEC Validation Load Can Cause a 'Bad Cache' Assertion Failure (0bc67930-d5c3-11e1-bef6-0024e81297ae)

ISC reports : High numbers of queries with DNSSEC validation enabled can cause an assertion failure in named, caused by using a 'bad cache' data structure before it has been initialized. BIND 9 stores a cache of query names that are known to be failing due to misconfigured name servers or a broke...

dns/bind9* -- Heavy DNSSEC Validation Load Can Cause a 'Bad Cache' Assertion Failure

ISC reports: High numbers of queries with DNSSEC validation enabled can cause an assertion failure in named, caused by using a 'bad cache' data structure before it has been initialized. BIND 9 stores a cache of query names that are known to be failing due to misconfigured name servers or a broken...

glibc security update

2.5-65.el57.3 - Use correct type when casting dtag 767687 - Report write error in addmnt even for cached streams 767687 - ldd: Never run file directly 767687. - Workaround misconfigured system 767687 2.5-65.el57.2 - Check values from TZ file header 767687...

OpenSSL Version Detection

Nessus was able to extract the OpenSSL version from the web server's banner. Note that security patches in many cases are backported and the displayed version number does not show the patch level. Using it to identify vulnerable software is likely to lead to false detections. C Tenable, Inc...

JBoss addURL Misconfiguration Attack

!/usr/bin/perl Exploit Title: JBoss, JMX Console, misconfigured DeploymentScanner Date: Oct 3 2011 Author: y0ug codsec.com Version: Tested on: Linux CVE : CVE-2010-0738 POC against misconfigured JBoss JMX Console It use the addUrl method in DeploymentScanner module More information...

JBoss & JMX Console - Misconfigured Deployment Scanner

!/usr/bin/perl Exploit Title: JBoss, JMX Console, misconfigured DeploymentScanner Date: Oct 3 2011 Author: y0ug codsec.com Version: Tested on: Linux CVE : CVE-2010-0738 POC against misconfigured JBoss JMX Console It use the addUrl method in DeploymentScanner module More information...

JBoss, JMX Console, misconfigured DeploymentScanner

Exploit for jsp platform in category web applications !/usr/bin/perl Exploit Title: JBoss, JMX Console, misconfigured DeploymentScanner Date: Oct 3 2011 Author: y0ug codsec.com Version: Tested on: Linux CVE : CVE-2010-0738 POC against misconfigured JBoss JMX Console It use the addUrl method in...

JBoss Enterprise Application Platform '/jmx-console' Authentication Bypass

The version of JBoss Enterprise Application Platform EAP running on the remote host allows unauthenticated access to documents under the /jmx-console directory. This is due to a misconfiguration in web.xml which only requires authentication for GET and POST requests. Specifying a different verb...

Ubuntu Update for apparmor update USN-1039-1

Ubuntu Update for Linux kernel vulnerabilities USN-1039-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10391.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for apparmor update USN-1039-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Misconfigured SOCKS filtering

A private network can be reached through the SOCKS proxy. The reachable IP address of this SOCKS proxy is public, and its 'external' address is private. Using the SOCKS proxy, an attacker may connect to internal machines that run on RFC1918 addresses, which are expected to be unreachable from the...

Seam2: Improper sanitization of parametrized JBoss EL expressions (ACE)

JBoss Seam 2 jboss-seam2, as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language EL expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when th...

Authorization

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability HA scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors...

Broken Web Servers

The remote web server seems password protected or misconfigured. Further tests on it were disabled so that the whole scan is not slowed down. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42799; scriptversion"$Revision: 1.5 $"; scriptcvsdate"$Date: 2011/08/17 16:19:4...

rsh Service Detection

Checks if the remote host is running a rsh service. Note: The reporting takes place in a separate VT SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Broken Web Server Detection

The remote web server seems password protected or misconfigured. Further tests on it will be disabled so that the whole scan is not slowed down. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34474; scriptversion"$Revision: 1.20 $"; scriptcvsdate"$Date: 2016/02/26...

CVE-2007-4949

Multiple PHP remote file inclusion vulnerabilities in phpReactor 1.2.7pl1 allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to 1 ekilat.com-int.tpl.php, 2 phpreactor.org-top.tpl.php, or 3 ekilat.com-top.tpl.php in examples/. NOTE: this issue has been...

Misconfigured Gnutella

The remote host is running the Gnutella servent service. It seems that the root directory of the remote host is visible through this service. Confidential files might be exported. OpenVAS Vulnerability Test $Id: gnutellaexport.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Misconfigured...