7208 matches found
Apache Tomcat 7.0.x < 7.0.12 Multiple Vulnerabilities
Binary data 5882.pasl...
CVE-2011-1550
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as...
Default configuration
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as...
CVE-2011-1550
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as...
[SECURITY] Fedora 14 Update: libcgroup-0.36.2-6.fc14
Control groups infrastructure. The tools and library help manipulate, contr ol, administrate and monitor control groups and the associated controllers...
Apache Tomcat 7.0.x < 7.0.11 Security Bypass Vulnerability
Binary data 5816.pasl...
Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability
Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability Solutionary ID: SERT-VDN-1004 Solutionary Disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-Weak-Xpto-Pwd-Storage.html CVE ID: Pending Product: Tembria Server Monitor Application...
Tembria Server Monitor security vulnerability
Weak cryptography, crossite scripting...
Apache Tomcat 5.5.x < 5.5.32 HTML Manager Interface XSS
Binary data 5787.pasl...
PRTG Network Monitor Default Credentials
It is possible to log into the remote PRTG Network Monitor installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of the PRTG Network Monitor installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
PRTG Network Monitor Detection
PRTG Network Monitor, a web-based tool for displaying network and bandwidth usage data, is hosted on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51874; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
PRTG Network Monitor login.htm errormsg Parameter XSS
The installed version of PRTG Network Monitor fails to sanitize input passed to 'errormsg' parameter in 'login.htm' before using it to generate dynamic HTML content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browse...
CVE-2010-4714
Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to 1 gwpoa.exe in the Post Office Agent, 2 gwmta.exe in the Message Transfer Agent, 3 gwia.exe in the Internet Agent, 4 the WebAccess Agent, or 5 th...
PRTG Network Monitor 'errormsg' Parameter Multiple Cross Site Scripting Vulnerabilities
PRTG Network Monitor is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may le...
PRTG Network Monitor Detection
Detection of PRTG Network Monitor. The script attempts to identify PRTG Network Monitor and to extract the version number. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PRTG Network Monitor 'errormsg' Parameter Multiple Cross Site Scripting Vulnerabilities
PRTG Network Monitor is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
WiPhire : A Wireless Penetration Testing Tool !
If you are active in the wireless penetration testing field, you must have seen a few scripts that either help you crack Wired Equivalent Privacy WEP. You also must have seen a few scripts that help you perform MITM attacks. But, not scripts that help you crack WEP and help you with MITM at the...
NProtect Anti-Virus 2007 <= 2010.5.11.1 Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits NProtect Anti-Virus 2007 with TKRgAc2k.sys FsContext for each process to open the device,and save key/key value /virus name /event object in FsContext. Here contains a design error , if a registry operation is intercepted and match the rules...
NProtect Anti-Virus 2007 Privilege Escalation
NProtect Anti-Virus 2007 with TKRgAc2k.sys FsContext for each process to open the device,and save key/key value /virus name /event object in FsContext. Here contains a design error , if a registry operation is intercepted and match the rules , but event handle has not been set, TKAcRg2k.sys will...
NProtect Anti-Virus 2007 < 2010.5.11.1 - Local Privilege Escalation
NProtect Anti-Virus 2007 with TKRgAc2k.sys FsContext for each process to open the device,and save key/key value /virus name /event object in FsContext. Here contains a design error , if a registry operation is intercepted and match the rules , but event handle has not been set, TKAcRg2k.sys will...