PT-2009-40: JIRA sensitive information disclosure

JIRA lets you prioritise, assign, track, report and audit your 'issues,' whatever they may be — from software bugs and help-desk tickets to project tasks and change requests. Vulnerability Description Positive Technologies Research Team has discovered a sensitive information disclosure...

Microsoft SQL Server 'sp_replwritetovarbin' Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to properly handle user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code and completely compromise affected computers. Failed attacks will likely cause...

Microsoft Internet Explorer Navigation Method Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

Microsoft Windows Common AVI ActiveX Control File Parsing Buffer Overflow Vulnerability

Description Microsoft Windows Common AVI ActiveX control is prone to a remote buffer-overflow vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromi...

Microsoft Internet Explorer Deleted Object Access Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

oramon-disclose.txt

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

OraMon 2.0.1 Remote Config File Disclosure Vulnerability

No description provided by source. ........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring...

OraMon 2.0.1 - Remote Configuration File Disclosure

OraMon 2.0.1 - Remote Configuration File Disclosure ........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring...

OraMon 2.0.1 - Remote Configuration File Disclosure

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

OraMon 2.0.1 Remote Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== OraMon 2.0.1 Remote Config File Disclosure Vulnerability ========================================================...

[SECURITY] Fedora 10 Update: nagios-3.0.5-1.fc10

Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux and some other NIX variants as a background process,...

Microsoft XML Core Services DTD Cross Domain Information Disclosure Vulnerability

Description Microsoft XML Core Services MSXML is prone to a cross-domain information-disclosure vulnerability because the application fails to properly handle certain error checks. An attacker can exploit this issue to harvest potentially sensitive information from a web page in another domain...

Design/Logic Flaw

The Resource Monitoring and Control RMC daemon in IBM Hardware Management Console HMC 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service daemon crash or hang via a packet with an invalid length...

IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.2 before Fix Pack 31 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - By sending a specially crafted HTTP request with the 'Host' header field set to more than 256 bytes, it may be possible to crash t...

OpenJDK JMX allows illegal operations with local monitoring (6332953)

Unspecified vulnerability in the Java Management Extensions JMX management agent in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via...

OpenJDK JMX allows illegal operations with local monitoring (6332953)

Unspecified vulnerability in the Java Management Extensions JMX management agent in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via...

[SECURITY] Fedora 9 Update: condor-7.0.5-1.fc9

Condor is a specialized workload management system for compute-intensive jobs. Like other full-featured batch systems, Condor provides a job queueing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs to Condor,...

Blue Coat Reporter Detection

The remote host is running Blue Coat Reporter, a web reporting system for monitoring centralized logs from Blue Coat appliances. And this service is used to access the application. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34334; scriptversion"1.10";...

Moderate: Red Hat Security Advisory: wireshark security update

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was...

microtik-poc.txt

/ -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' SNMP Service General Information Summary ... RouterOS supports only Get, which means that you can use this implementation only for network monitoring. The MikroTik Router...