Websense Proxy - Filter Bypass

Websense Proxy - Filter Bypass Websense Proxy Filter Bypass 1. Advisory Information Date published: 2012-11-25 Vendors contacted: Websense Release mode: Coordinated release Vendor was notified 2. Vulnerability Information Class: Filter Bypass Remotely Exploitable: Yes 3. Software Description...

PT-2012-3340 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 9 Description: A use-after-free issue allows remote attackers to execute arbitrary code via a crafted web site. This occurs due to incorrect access to an object that has not been correctly initialized or ha...

PT-2012-1046 · Debian · Hostapd

Name of the Vulnerable Software and Affected Versions: hostapd versions 0.6 through 1.0 Description: The issue concerns multiple vulnerabilities in the hostapd package of the Debian GNU/Linux operating system, which can be exploited remotely to disrupt the availability of protected information...

MF Gig Calendar Wordpress Plugin - Cross-Site Scripting

/--------------------------------------------------------- | MF Gig Calendar Wordpress Plugin - Cross-Site Scripting | ---------------------------------------------------------/ Summary ======= MF Gig Calendar 0.9.2 is subject to a cross-site scripting vulnerability. The value of a generic...

PT-2012-1245 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Reliability Analysis Metrics Calculation Engine RACEng affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Reliability Analysis Metrics Calculation Engine RACEng due to inadequat...

Joomla Car Component Multiple SQL Injection Vulnerabilities

This host is running Joomla car component and is prone to multiple SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomcarmultsqlinjvuln.nasl 5888 2017-04-07 09:01:53Z teissa $ Joomla Car Component Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright: Copyright ...

Joomla Boss Component Local File Inclusion Vulnerability

This host is running Joomla Boss component and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacombosslfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla Boss Component Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

Joomla XBall Component SQL Injection Vulnerability

This host is running Joomla XBall component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomxballsqlinjvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Joomla XBall Component SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities

The host is running SQLiteManager and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsqlitemanagermultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities Authors: Rachana Shetty...

FreeSSHd Remote Denial of Service Vulnerability

The host is running FreeSSHd and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodfreesshdremotedosvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ FreeSSHd Remote Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

HP Data Protector Media Operations Heap Buffer Overflow Vulnerability

This host is running HP Data Protector Media Operations and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbhpdataprotectormediaoperationsbofvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ HP Data Protector Media Operations Heap Buffer Overflow Vulnerability Authors:...

Calisto Light / Light Plus / Full SQL Injection

Calisto light, light plus and full, Sql Injection And user or Admin bypass Vendor URL: http://www.calistosoft.com.ar/ Advisore: http://lostmon.blogspot.com/2011/08/calisto-light-light-plus-and-full-sql.html Vendor notify: YES exploit available: YES Vulnerability Description Calisto Light, Light...

GE Proficy Historian Web Administrator XSS

Overview ICS-CERT originally released Advisory ICSA-11-243-02P on the US-CERT secure Portal on August 31, 2011. ICS-CERT has received a report from independent security researchers Billy Rios and Terry McCorkle concerning multiple cross-site scripting XSS vulnerabilities in the GE Intelligent...

Synergy Protocol Information Disclosure Vulnerability (Windows)

This host is installed with Synergy and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbsynergyprotocolinfodiscvulnwin.nasl 8189 2017-12-20 09:10:19Z cfischer $ Synergy Protocol Information Disclosure Vulnerability Windows Authors: Sooraj KS Copyright: Copyrigh...

SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability

This host is installed with SAP Crystal Reports and is prone to heap-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsapcrystalreportsbofvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability Authors: Madhuri D...

Kerio Products 'STARTTLS' Plaintext Command Injection Vulnerability

The host is running Kerio Mail Server/Connect and is prone to plaintext command injection vulnerability. OpenVAS Vulnerability Test $Id: secpodkerioproductsstarttlscmdinjvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Kerio Products 'STARTTLS' Plaintext Command Injection Vulnerability Authors: Soora...

Air Contacts Lite Denial Of Service

Discussion - DcLabs Security Research Group advises about the following vulnerabilityies: Software - Air Contacts Lite By i-NOVATiON GmbH Vendor Product Description - Sharing contacts can't be easier. Wireless access to your iPhone contacts from your Mac or PC. This is the Lite Version of Air...

jSchool Advanced SQL Injection

----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

jSchool Advanced SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

Linksys WAP610N Unauthenticated Root Consle

Secure Network - Security Research Advisory Vuln name: Linksys WAP610N Unauthenticated Access With Root Privileges Systems affected: WAP610N Firmware Version: 1.0.01 Systems not affected: -- Severity: High Local/Remote: Remote Vendor URL: http://www.linksysbycisco.com Authors: Matteo Ignaccolo...