2170 matches found
Debian: Security Advisory (DSA-292)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1054-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1301-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 788-1 (kismet)
The remote host is missing an update to kismet announced via advisory DSA 788-1. Several security related problems have been discovered in kismet, a wireless 802.11b monitoring tool. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2626 Insecure handlin...
mod_proxy_ftp XSS
modproxyftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting XSS attacks using UTF-7 encoding...
Cross-Site Scripting vulnerability in RiSearch PHP
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в RiSearch PHP это локальный поисковый движок. XSS: http://site/search/searchru.php?query=223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимы старые версии движка. Последняя версия движка уже неуязвима...
PostgreSQL privilege escalation via dblink
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...
CVE-2007-6661
2z project 0.9.6.1 allows attackers to change the password without supplying the old password...
CVE-2007-6661
2z project 0.9.6.1 allows attackers to change the password without supplying the old password...
SuSE 10 Security Update : findutils-locate (ZYPP Patch Number 3966)
The cronjob that deletes old core files could be tricked to delete arbitrary files. Old core files are deleted if DELETEOLDCORE=yes is set. That is not the case by default though. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Old Guy's Scripts TalkBack Comments and Guestbook远程文件包含漏洞
TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities Old Guy's Scripts TalkBack Comments and Guestbook是一款基于PHP的WEB应用程序。 Old Guy's Scripts TalkBack Comments and Guestbook不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于多个脚本对用户提交的'languagefile'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。...
DSA-1402-1 gforge - insecure temporary files
Bulletin has no description...
Fedora 7 : firestarter-1.0.3-16.fc7 (2007-0700)
Tue Jun 26 2007 Damien Durand - 1.0.3-16 - Fix BR - Fix active connections status - Sun Jun 17 2007 Damien Durand - 1.0.3-15 - Remove old doc - Fix pam configuration Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
CIFS signing sec= mount options don't work correctly
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request...
Airkiosk/formlib application is XSS vuln
In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...
[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...
2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== 2532|Gigs 1.2.1 activateuser.php Local File Inclusion Vulnerability =====================================================================...
Butterfly online vistors counter 1.08 RFI
App Name : Butterfly online vistors counter v.1.08 HomePage : http://www.phoenix.frihost.net/butterfly/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: visitor.php includeonce $SERVER"DOCUMENTROOT" . "/butterfly/custom.php"; // include settings POC:...
CVE-2007-4049
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2000-1205. Reason: This candidate is a duplicate of CVE-2000-1205. Notes: All CVE users should reference CVE-2000-1205 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...