MDVA-2009:224 : mandriva-kde4-config

This package adds new top bar for Mandriva Flash 2010 edition. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

MDVA-2009:271 : k3b

Mandriva 2010 includes k3b 1.68 alpha3 and the stable release won't be ready before a long time, this update introduces the Aplha4 version, with lot's of bugfixes and some new features including: New features Added close buttons on project tabs 159751 Added support for new libmpcdec API 214149...

Max CMS2. 0beta (maxcms)SQL injection and administrator authentication bypass vulnerability-vulnerability warning-the black bar safety net

This system was internally very popular video-on-demand system, before 1. 5 version vulnerability very much, the 2.0 version in terms of security has improved, but still there are loopholes exist. Look at the code \inc\ajax. asp dim action : action = getForm"action", "get" response. Charset="gbk"...

CVE-2010-2718

Multiple cross-site scripting XSS vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 txtusername parameter to login.php, 2 todo parameter to newtodo.php, and unspecified vectors to 3 newtelephone.php and 4...

chillyCMS 1.1.3 Cross Site Request Forgery

input type="hidden...

CVE-2010-2697

Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...

Sijio Community Software SQL Injection/Persistent XSS Vulnerability

Exploit for php platform in category web applications =================================================================== Sijio Community Software SQL Injection/Persistent XSS Vulnerability ===================================================================...

Mandriva Update for mdkonline MDVA-2010:178 (mdkonline)

Check for the Version of mdkonline OpenVAS Vulnerability Test Mandriva Update for mdkonline MDVA-2010:178 mdkonline Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for mdkonline MDVA-2010:178 (mdkonline)

Check for the Version of mdkonline OpenVAS Vulnerability Test Mandriva Update for mdkonline MDVA-2010:178 mdkonline Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

ATutor 2.0 Cross Site Request Forgery

input type="submit" name="submit" value="Sav...

Tomato Cart 1.0 Cross Site Request Forgery

img...

Fedora 13 : amsn-0.98.3-1.fc13 (2010-7291)

fixes security problem caused by not validating ssl certicates, als add new features because of a new upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 13 : qt-4.6.2-8.fc13 (2010-4521)

This update fixes several WebKit security issues: CVE-2010-0046: CSS format argument memory corruption CVE-2010-0049: Use of freed line boxes in mixed LTR/RTL text CVE-2010-0050: Crash at HTMLParser after handling misnested style tags CVE-2010-0051 CVE-2010-0651: Remote information disclosure...

Fedora 12 : moin-1.8.8-1.fc12 (2010-9857)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 11 : amsn-0.98.3-2.fc11 (2010-7378)

fixes security problem caused by not validating ssl certificates, also add new features because of a new upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 13 : moin-1.9.3-1.fc13 (2010-10550)

Update moin to 1.9.3, which fixes multiple XSS vulnerabilities and includes some bug fixes and new features. More information on the fixed XSS vulnerabilities is available at http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg For a list of bug fixes and new features refer to...

Fedora 11 : moin-1.8.8-1.fc11 (2010-9876)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Sysax Multi Server Add Administrator

Assuming the server is running as admin the overflow can actually be used to execute arbitrary code. In our example we spawn an instance of cmd.exe and create a new admin, Billyboy, with a password of woot. This has been tested with Windows XP SP2. +-------- Start Exploit --------+ import paramik...

Winamp 5.572 (Windows 7) - Local Buffer Overflow (ASLR + DEP Bypass)

!/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars: '\x00\xff\x5c\x2f\x0a\x0d\x20'...