Microsoft Visio Attribute Validation Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability. This issue arises when the application processes a malicious file. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...

Oracle JRE Java Platform SE and Java Deployment Toolkit Plugins Code Execution Vulnerabilities

Description Java Runtime Environment JRE is prone to arbitrary code-execution vulnerabilities that affect multiple Java plugins for multiple browsers. Attackers can exploit these issues to execute arbitrary code in the context of the user running the vulnerable applications. The issues affect Jav...

Vulnerability Centreon IT & Network Monitoring v2.1.5

!/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-120SQL Injection&o=p&min=1...

ZABBIX<= 1.8.1 DBcondition函数SQL注入漏洞

BUGTRAQ ID: 39148 CVE ID: CVE-2010-0686 zabbix是一个CS结构的分布式网络监控系统。 Zabbix API使用了include/db.inc.php中定义的DBcondition函数来执行SQL查询中WHERE子句的条件。该函数没有对用户提供数据提供额外的检查： function DBcondition$fieldname, &$array, $notin=false, $string=false global $DB; $condition = ''; ---cut--- $in = $notin?' NOT IN ':' IN ';...

[SECURITY] Fedora 11 Update: dsniff-2.4-0.9.b1.fc11

A collection of tools for network auditing and penetration testing. Dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf and webspy allow to passively moni tor a network for interesting data passwords, e-mail, files. Arpspoof, dnsspo of and macof facilitate the interception of network traffic normall...

Centreon IT And Network Monitoring 2.1.5 SQL Injection

!/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL Injection&o=p&min=1...

Zabbix 1.8.1 - SQL Injection

Zabbix 1.8.1 - SQL Injection ============================================= - Release date: April 1st, 2010 - Discovered by: Dawid Golunski - Severity: High ============================================= I. VULNERABILITY ------------------------- Zabbix = 1.8.1 SQL Injection II. BACKGROUND...

Centreon IT Network Monitoring 2.1.5 - SQL Injection

Centreon IT Network Monitoring 2.1.5 - SQL Injection !/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL...

Centreon IT & Network Monitoring 2.1.5 - SQL Injection

!/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL Injection&o=p&min=1...

Centreon IT & Network Monitoring v2.1.5 - Injection SQL Vulnerability

Exploit for php platform in category web applications ===================================================================== Centreon IT & Network Monitoring v2.1.5 - Injection SQL Vulnerability ===================================================================== !/usr/bin/perl...

Centreon IT & Network Monitoring v2.1.5 - Injection SQL

No description provided by source. !/usr/bin/perl //--------PoC---------// Title : Centreon IT & Network Monitoring v2.1.5 - Injection SQL Version : 2.1.5 Author : Jonathan Salwan [email protected] Vuln sql injection http://localhost/centreon/main.php?p=201&hostid=-1%20SQL Injection&o=p&min=1...

Microsoft Excel EntExU2 Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Zenoss Server Multiple Vulnerabilities

The host is running Zenoss Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzenossservmultvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Zenoss Server Multiple Vulnerabilities Authors: Rachana Shetty Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

Fedora Update for zabbix FEDORA-2010-0266

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2010-0266 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

Overview The web management interface for the APC Network Monitoring Card NMC used in various APC devices contains cross-site scripting XSS and cross-site request forgery CSRF/XSRF vulnerabilities. By convincing a victim to load a specially crafted URL while authenticated to an NMC, an attacker...

Microsoft PowerPoint File Path Handling Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint file. Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user...

IBM Tivoli Monitoring Service Console Detection

Tivoli Monitoring Service Console, a web interface for running system diagnostics, is hosted on the remote web server. This software is included with some IBM products, such as DB2. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44394; scriptversion"1.10";...

CVE-2010-0472

kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service daemon crash via a certain byte sequence...

Design/Logic Flaw

kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service daemon crash via a certain byte sequence...

CVE-2010-0472

kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service daemon crash via a certain byte sequence...