Fedora Core 10 FEDORA-2009-7370 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7370. OpenVAS Vulnerability Test $Id: fcore20097370.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7370 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 11 FEDORA-2009-7359 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7359. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-7415 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7415. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2009-2004

Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 student and 2 course parameters, a different vector than CVE-2007-2902...

CVE-2009-2004

Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 student and 2 course parameters, a different vector than CVE-2007-2902...

Conficker-infected PCs get update, better anti-security defenses

From Network World Jeremy Kirk Millions of PCs infected with the Conficker virus have received a series of updated files over peer-to-peer connections that improve the worm’s defenses against security products and also include a sniffer and some fake anti-virus software. This is just the latest...

Orbit Downloader 2.8.7 Arbitrary File Deletion Vulnerability

No description provided by source. waraxe-2009-SA073 - Arbitrary File Deletion in Orbit Downloader = 2.8.7 =============================================================================== Author: Janek Vind "waraxe" Date: 21. March 2009 Location: Estonia, Tartu Web:...

Can social networks foster security?

It’s a departure from the stance that most people are taking these days when it comes to issues of social networking and security, but some industry players are pitching the idea eweek.com that the ever-more-popular communications applications could someday replace more traditional messaging...

Pligg Auto-Voter Using XSS to Bypass CSRF Protection

Explanation: Pligg Suffers from a Reflective Cross Site Scripting vulnerability in index.php. For the $GET'category' variable. Exploit code was written that uses this flaw to bypass the CSRF protection to then vote on any pligg article of the attackers choosing. I took inspiration from the Myspac...

Bypass-Myspace-Phisher-Block.txt

Bypass Myspace.com Phisher Block Script By IMC EXE February 28, 2008 Greetz IMC GrahamPhisher IMC Tullywacker IMC Phire Phreak IMC TwiZted Tom Insanemasterminds.com Script ------------------ Bypass Phisher Block Script By IMC EXE...

MySpace Uploader ActiveX Control < 1.0.0.6 Action Property Buffer Overflow

The remote host contains a version of the MySpace Uploader ActiveX control MySpace.Uploader.4.1 that reportedly is affected by a buffer overflow that can be triggered by assigning a string longer than 260 characters to certain properties, such as 'Action', 'ExtractIptc', and 'ExtractExif'. If a...

DSquare Exploit Pack: D2SEC_MYSPACE

Name| d2secmyspace ---|--- CVE| CVE-2008-0659 Exploit Pack| D2ExploitPack Description| MySpace Uploader MySpaceUploader.ocx ActiveX Stack Overflow Notes|...

CVE-2008-0659

CVE-2008-0659 is a stack-based buffer overflow in Aurigma ImageUploader ActiveX control (ImageUploader4.ocx) up to version 4.5.70 and in MySpaceUploader.ocx 1.0.0.4, enabling remote code execution via a long Action property. Connected sources confirm the affected component and versions and descri...

MySpace Uploader - MySpaceUploader.ocx 1.0.0.4 Remote Buffer Overflow

MySpace Uploader - MySpaceUploader.ocx 1.0.0.4 Remote Buffer Overflow MySpace Uploader Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

MySpace Uploader (MySpaceUploader.ocx 1.0.0.4) BOF Exploit

No description provided by source. !-- MySpace Uploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6 MySpaceUploader.ocx version 1.0.0.4: 48DD0448-9209-4F81-9F6D-D83562940134...

MySpace Uploader (MySpaceUploader.ocx 1.0.0.4) BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================== MySpace Uploader MySpaceUploader.ocx 1.0.0.4 BOF Exploit ========================================================== MySpace Uploader Buffer Overflow Exploit function Check //...

MySpace Uploader - 'MySpaceUploader.ocx 1.0.0.4' Remote Buffer Overflow

MySpace Uploader Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

CVE-2007-6668

admin/uploadgames.php in MySpace Content Zone MCZ 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading 1 a .php file and 2 a .php%00.jpeg file...

Unrestricted file upload

admin/uploadgames.php in MySpace Content Zone MCZ 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading 1 a .php file and 2 a .php%00.jpeg file...

CVE-2007-6668

admin/uploadgames.php in MySpace Content Zone MCZ 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading 1 a .php file and 2 a .php%00.jpeg file...