8388 matches found
Fedora 13 : dhcp-4.1.1-27.P1.fc13 (2010-17303)
Thu Nov 4 2010 Jiri Popelka - 12:4.1.1-27.P1 - Fix for CVE-2010-3611 649880 - Wed Oct 13 2010 Jiri Popelka - 12:4.1.1-26.P1 - Server was ignoring client's Solicit where client included address/prefix as a preference 634842 - Tue Sep 7 2010 Jiri Popelka - 12:4.1.1-25.P1 - Hardening...
Systemtap: Insecure loading of modules
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBEOPTIONS environment variable to specify a malicious configuration file...
PT-2010-1046 · Red Hat · Systemtap-Server +9
Name of the Vulnerable Software and Affected Versions: systemtap versions 0.6.2 through 1.3 systemtap-runtime versions 0.6.2 through 1.1 systemtap-testsuite versions 0.6.2 through 1.1 systemtap-client versions 1.1 through 1.2 systemtap-server versions 1.1 systemtap-initscript versions 1.1...
Build A Niche Store 3.0 SQL Injection / Shell Upload
Exploit Title : Build a Niche Store v3.0 BANS Authentication Bypass Vulnerability Author : ThunDEr HeaD Contact : [email protected] Date : 13-11-2010 HomePage : www.indishell.in Price : $49.95 Version : 3.0 Software: http://www.buildanichestore.com/ Vulnerability Style : Authentication...
NovaBoard <= 1.1.4 'nova_lang' LFI Vulnerability
NovaBoard is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Missing or Permissive X-Frame-Options HTTP Response Header
The remote web server in some responses sets a permissive X-Frame-Options response header or does not set one at all. The X-Frame-Options header has been proposed by Microsoft as a way to mitigate clickjacking attacks and is currently supported by all major browser vendors %NASLMINLEVEL 70300 C...
CVE-2010-3696
The frdhcpdecode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause a denial of service infinite loop and daemon outage via a packet that has more than one sub-option...
JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities
JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities Name JE Guestbook Vendor http://www.joomlaextensions.co.in Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-09-30 X. INDEX I. ABO...
Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
This host is installed with Microsoft Word and is prone to null pointer dereference vulnerability. OpenVAS Vulnerability Test $Id: secpodmsofficewordnullpntrdosvuln.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability Authors: Antu Sanadi...
Microsoft Windows - SMB Relay Code Execution (MS08-068) (Metasploit)
$Id: smbrelay.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Microsoft Outlook - 'ATTACH_BY_REF_ONLY' File Execution (MS10-045) (Metasploit)
$Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability
No description provided by source. =============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian...
vBulletin 3.8.4 / 3.8.5 Registration Bypass
=============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...
vBulletin 3.8.4/3.8.5 - Registration Bypass
=============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...
vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability
Exploit for php platform in category web applications ========================================================= vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability ========================================================= 010101010101010101010101010101010101010101010101010101010 0 0 1 Irani...
vBulletin 3.8.43.8.5 - Registration Bypass
vBulletin 3.8.43.8.5 - Registration Bypass =============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1...
MDVA-2010:184 : net-snmp
It was discovered that the snmpd daemon could segfault with certain configuration options. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...
Sun Java Web Server - System WebDAV OPTIONS Buffer Overflow (Metasploit)
$Id: sunjswsdavoptions.rb 9971 2010-08-07 06:59:16Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CustomCMS Persistent XSS Vulnerability
Exploit for php platform in category web applications ====================================== CustomCMS Persistent XSS Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...
Pulling Back the Curtain on Rogue AV Tech Support
We’ve blogged a few times about rogue AV, explaining how search engines have been abused using Black Hat Search Engine Optimization techniques to redirect web surfers to rogue AV websites. Recently, we’ve noticed that the rogue AVs being spread are all equipped with an “Online Support” button. Se...