Directory traversal

Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magicquotesgpc is disabled, allow remote authenticated users with editor or administrative application access to read arbitrary files via a .. dot dot in the source parameter in a 1 list or 2 editnews action to the...

PHP vulnerability full solution-vulnerability warning-the black bar safety net

PHP web page security issues For PHP website mainly exist the following types of attacks: 1. Command injectionCommand Injection 2. eval injectionEval Injection 3. Client scripting attacksScript Insertion 4. Cross-site scripting attacksCross Site Scripting, XSS 5. SQL injectionattacksSQL injection...

[SECURITY] Fedora 10 Update: snort-2.8.5.1-1.fc10

Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows,...

Stable Update: Fix Google Chrome not Starting

Google Chrome's Stable channel has been updated to 3.0.195.33 to fix a potential issue that could cause Google Chrome to stop working and a security issue. This release removes a dependency on a Windows library t2embed.dll that is not required by Google Chrome. If that library is missing or the...

Microsoft SharePoint Team Services Information Disclosure Vulnerability

This host is installed with Microsoft SharePoint Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbmssharepointinfodiscvuln.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft SharePoint Team Services Information Disclosure Vulnerability Authors: Nikita MR...

RHEL 3 : kernel (RHSA-2009:1550)

Updated kernel packages that fix several security issues and multiple bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Multiple Browsers Telnet URI Handler File Manipulation (CVE-2004-0411; CVE-2004-0473)

There exists a vulnerability that affects various web-browsers. Insufficient input validation for telnet URI e.g., telnet://hostname can cause the Telnet software activated by the browsers to treat specially crafted Telnet URI as command-line options. As such, a malicious attacker may be able to...

CGI Generic Tests Load Estimation (all tests)

This script computes the maximum number of requests that would be done by the generic web tests, depending on miscellaneous options. It does not perform any test by itself. The results can be used to estimate the duration of these tests, or the complexity of additional manual tests. Note that the...

w3af (NASL wrapper)

This plugin uses w3af w3afconsole to be exact to find web security issues. See the preferences section for w3af options. Note that OpenVAS is using limited set of w3af options. Therefore, for more complete web assessment, you should use standalone w3af tool for deeper/customized checks. OpenVAS...

Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

Multiple Vendor Telnet Client LINEMODE Buffer Overflow (CVE-2005-0469)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

RedHat Security Advisory RHSA-2009:1472

The remote host is missing updates announced in advisory RHSA-2009:1472. Xen is an open source virtualization framework. Virtualization allows users to run guest operating systems in virtual machines on top of a host operating system. The pyGrub boot loader did not honor the password option in th...

openSUSE 10 Security Update : kernel (kernel-6440)

This kernel update for openSUSE 10.3 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow...

CVE-2009-3457

Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...

Cisco应用控制引擎(ACE) XML网关IP地址信息泄漏漏洞

Bugraq ID: 36522 Cisco ACE XML网关是Cisco应用控制引擎ACE家族产品的重要组件。 Cisco ACE XML网关缺少正确的错误处理管理，远程攻击者可以利用漏洞获得内部IP信息。 Cisco ACE XML网关在不能正确找到请求相匹配的处理器时，会直接对客户端提供包含内部IP地址的错误消息应答。 相关的请求不仅仅限于OPTIONS请求类型，如果GET请求使用的路径没有相应的处理器配置，也同样泄漏内部IP地址信息。 Cisco Application Control Engine ACE XML Gateway 6.0 Cisco Application...

WoltLab Burning Board Cross-Site Request Forgery Vulnerability

This host is running WoltLab Burning Board and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodwoltlabburningboardcsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoltLab Burning Board Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyrigh...

KVIrc URI Handler Argument Injection Vulnerability

This host has KVIrc installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodkvircarginjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ KVIrc URI Handler Argument Injection Vulnerability Authors: Antu Sanadi Copyright c 2009 SecPod, http://www.secpod.com...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. VID e15f2356-9139-11de-8f42-001aa0166822 OpenVAS Vulnerability Test $ Description: Auto generated from VID e15f2356-9139-11de-8f42-001aa0166822 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Adobe Acrobat < 8.1.3 Multiple Vulnerabilities

The version of Adobe Acrobat installed on the remote host is earlier than 9.0 / 8.1.3. Such versions are reportedly affected by multiple vulnerabilities : - There is a published denial of service issue. CVE-2008-2549 - A stack-based buffer overflow when parsing format strings containing a floatin...

Windows x64 Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 460 include Msf::Payload::Windows include Msf::Payload::Single includ...