Gale EVP_VerifyFinal() Security Bypass Vulnerability

The host is running Gale and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbgalesecbypassvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Gale EVPVerifyFinal Security Bypass Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Microsoft Windows XP SP3 denial of service vulnerability

The host is running Microsoft Windows XP which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwinxpchmdosvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Microsoft Windows XP SP3 denial of service vulnerability. Updated By: Antu Sanadi on 2011-09-22 Updated the version...

Microsoft Outlook Express Malformed MIME Message DoS Vulnerability

The host is installed with Microsoft Outlook Express and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbmsoutlookexpressdosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Microsoft Outlook Express Malformed MIME Message DoS Vulnerability Authors: Chandan S Copyright:...

Sun Java Web Start Remote Command Execution Vulnerability (Windows)

This host is running Sun Java Web Start and is prone to Remote Command Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawscodeexecvulnwin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java Web Start Remote Command Execution Vulnerability Windows Authors: Veerendra GG Copyright:...

Microsoft iExplorer ' ' Address Bar URI Spoofing Vulnerability

This host is installed with Microsoft Internet Explorer and is prone to an URI spoofing vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiexplorerurispoofvuln900170.nasl 8957 2018-02-26 14:41:13Z asteins $ Description: Microsoft iExplorer '' Address Bar URI Spoofing Vulnerability Authors:...

rmsoftminishop-xss.txt

RMSOFT MiniShop module multiple variable XSS Vendor url:http://redmexico.com.mx Advisore:http://lostmon.blogspot.com/2008/08 /rmsoft-minishop-module-multiple.html Vendor notify:no exploit available:yes RMSOFT MiniShop is a E-commerce php/Mysql script module for multiple CMS Systems like...

desknet's cross-site scripting vulnerability

Overview If a user views HTML email containing a malicious script, it could be executed. This problem allows execution of script having patterns other than those addressed in JVNF88C2C13 additional information to JVN89DE2014. Impact lf a login ID, password, or session information is leaked, an...

Problem with referer header handling on mobile phone web browsers

Overview We have confirmed that web browser products from Openwave Systems Inc. used for the Internet connection service for mobile phones have a problem in its function of sending referer information under certain circumstances. This problem has been reported for KDDI's au mobile phones. KDDI,...

Nucleus cross-site scripting vulnerability

Overview Nucleus, an open source content management system, contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the web browser of an administrator with Nucleus super-admin privilege. If session information from a cookie is leaked, an attacker could...

Sun Java System Web Server cross-site scripting vulnerability

Overview Sun Java System Web Server originally called Sun ONE Web Server contains a cross-site scripting vulnerability. A vulnerable web server does not adequately validate the HTTP REFERER header before using the contents in the default error page. Impact A malicious script may be executed on th...

PowerPHPBoard 1.00b Multiple Local File Inclusion Vulnerabilities

No description provided by source. DSECRG-08-021 Digital Security Research Group DSecRG Advisory Application: PowerPHPBoard Versions Affected: 1.00b Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Da...

Pidgin远程命令执行漏洞

BUGTRAQ ID: 24904 CNCAN ID:CNCAN-2007071609 Pidgin是一款支持多种协议的即时消息软件，旧名为Gaim。 Pidgin不正确处理用户提交的输入，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 目前没有详细漏洞细节提供。 Pidgin 2.0.2 目前没有解决方案提供： http://pidgin.im/pidgin/home/...

OpenOffice StarCalc解析器未明缓冲区溢出漏洞

OpenOffice是一款开放源代码的文字处理程序。 OpenOffice StarCalc解析器存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 S.u.S.E. SUSE Linux Enterprise Desktop 10 S.u.S.E. SLE SDK 10 S.u.S.E. openSUSE 10.2 S.u.S.E. Novell Linux Desktop 9 S.u.S.E. Linux Desktop 1.0 S.u.S.E. Linux 9.3 x86 S.u.S.E. Linux 10.1 x86-64...

phpicalendar-xss.txt

PHP icalendar multiple variable cross site scripting Vendor url:http://phpicalendar.net/ Advisore:http://lostmon.blogspot.com/2006/12/ php-icalendar-multiple-variable-cross.html Vendor notify: YES Exploit included:YES PHP icalendar contains a flaw that allows a remote cross site scripting...

GNU Wget FTP_Syst函数远程拒绝服务漏洞

GNU Wget是一款流行的多协议文件获取应用程序。 GNU Wget FTPSyst函数存在问题，远程攻击者可利用此漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 GNU wget 1.10.2 GNU wget 1.10.1 GNU wget 1.10 GNU wget 1.9.1 + MandrakeSoft Corporate Server 3.0 x8664 + MandrakeSoft Corporate Server 3.0 + MandrakeSoft Linux Mandrake 10.2 x8664 + MandrakeSoft Linux Mandra...

Netscape/K-Meleon/Flock JavaScript navigator Vulnerability

Description: The newest versions of Netscape, K-Meleon and Flock browsers are affected to JavaScript navigator vulnerability described in http://browserfun.blogspot.com/2006/07/mobb-28-mozilla-navigator-object.html and Mozilla Foundation Security Advisory 2006-45. When method used in a web page...

Opera 9 - long href Remote Denial of Service

a...

ArmySystemv2.1.txt

Invision Power Board Army System Mod = 2.1 SQL Injection Exploit VULNERABLE PRODUCT ----------------------------------- Invision Power Board Army System Mod Version: 2.1 and priors. Url: http://supersmashbrothers.2ya.com Vulnerability: Remote SQL Injection...

CheesyBlog-1.0.txt

New eVuln Advisory: CheesyBlog XSS Vulnerability http://evuln.com/vulns/49/summary.html --------------------Summary---------------- Software: CheesyBlog Sowtware's Web Site: http://cheesepizza.net/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched...

eggblog-sql.txt

New eVuln Advisory: eggblog Multiple SQL Injection & XSS Vulnerabilities http://evuln.com/vulns/39/summary/bt/ --------------------Summary---------------- Software: eggblog Sowtware's Web Site: http://www.epicdesigns.co.uk/projects/eggblog Versions: 2.0 Critical Level: Moderate Type: Multiple...