DEBIAN-CVE-2011-1097

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via malformed data...

rsync: Incremental file-list corruption due to temporary file_extra_cnt increments

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via malformed data...

Wireshark Denial of Service Vulnerability March-11 (Windows)

The host is installed with Wireshark and is prone to DoS vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvulnmar11win.nasl 7029 2017-08-31 11:51:40Z teissa $ Wireshark Denial of Service Vulnerability March-11 Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks...

CubeCart 2.0.6 XSS and SQLi Vulnerabilities

CubeCart is prone to an SQL injection SQLi and a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SA-CONTRIB-2011-012 - Spaces - Access bypass

The Spaces module makes sitewide configuration options available to be overridden by individual "spaces" on a Drupal site. Spaces provides a Views module access plugin that does not properly check its permission setting which may allow underprivileged users to visit certain pages. This...

WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting

WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS Date: 20-2-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/relevanssi.2.7.2.zip Version: Relevanssi 2.7.2, WordPress 3.0.5 Teste...

WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting

Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS Date: 20-2-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/relevanssi.2.7.2.zip Version: Relevanssi 2.7.2, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8 Vendor Response: plugin author released a...

arachni (NASL wrapper)

This plugin uses arachni ruby command line to find web security issues. See the preferences section for arachni options. Note that OpenVAS is using limited set of arachni options. Therefore, for more complete web assessment, you should use standalone arachni tool for deeper/customized checks...

MS Windows HID Functionality(Over USB) Code Execution Vulnerability

This host is installed with USB device driver software and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowshidoverusbcodeexecvuln.nasl 8724 2018-02-08 15:02:56Z cfischer $ MS Windows HID FunctionalityOver USB Code Execution Vulnerability Authors: Antu Sanadi...

FreeBSD DoS

Crash on setting different sockets options for different sockets types for large number of sockets...

Microsoft Internet Explorer MHTML Protocol Handler XSS

Exploit for windows platform in category local exploits Ph4nt0m Webzine 0x05 http://secinn.appspot.com/pstzine Was finally released yesterday, There are two articles about the browser security0x05 and 0x06.If the combination of both, we can complete a lot of interesting attacks... 1.Cross Site...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05 http://secinn.appspot.com/pstzine Was finally released yesterday, There are two...

Microsoft Internet Explorer MHTML Cross Site Scripting

Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05 http://secinn.appspot.com/pstzine Was finally released yesterday, There are two...

HTTP Client MS Credential Catcher

This module attempts to quietly catch NTLM/LM Challenge hashes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework NTLMCONST = Rex::Proto::NTLM::Constants NTLMCRYPT = Rex::Proto::NTLM::Crypt MESSAGE =...

Hacker Bid : Indianhaxors.com Domain for Sale !

Hacker Bid : Indianhaxors.com Domain for Sale ! Hello Hackers, One of mine friend having a very popular keyword and impressive Domain name - www.indianhaxors.com . He has no time to manage the site, so finally he decide to sell this domain + lots of other Promotional Offers. Domain Offer : 1. Ful...

httpdASM <= 0.92 Directory Traversal Vulnerability - Active Check

httpdASM is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WSO 2.5 (web shell)

Данная утилита предоставляет веб-интерфейс для удаленной работы c операционной системой и ее службами/демонами. Описание возможностей / особенности: Авторизация на cookies Информация о сервере Файловый менеджер Копирование, переименование, перемещение, удаление, чмод, тач, создание файлов и папок...

VMware 2 Web Server Directory Traversal Vulnerability (Windows)

This host is installed with VMware 2 Web Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbvmwarewebserverdirtravvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware 2 Web Server Directory Traversal Vulnerability Windows Authors: Sooraj KS Copyright:...

SuSE 11 Security Update : openslp (SAT Patch Number 3317)

The openslp daemon could run into an endless loop when receiving specially crafted packets. CVE-2010-3609 Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration options to openSLP:...