8382 matches found
MiniTwitter 0.2b - Remote User Options Changer
MiniTwitter 0.2b - Remote User Options Changer || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
MiniTwitter 0.2b Remote User Options Changer Exploit
Exploit for unknown platform in category web applications ==================================================== MiniTwitter 0.2b Remote User Options Changer Exploit ====================================================...
Mandriva Linux Security Advisory : kernel (MDVSA-2008:224-1)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, whic...
Mandriva Linux Security Advisory : autofs (MDVSA-2008:009-1)
The default behaviour of autofs 5 for the hosts map did not specify the nosuid and nodev mount options. This could allow a local user with control of a remote NFS server to create a setuid root executable on the exported filesystem of the remote NFS server. If this filesystem was mounted with the...
FreeBSD : mailman XSS in user options page (00263aa3-67a8-11d8-80e3-0020ed76ef5a)
From the 2.1.1 release notes : Closed a cross-site scripting vulnerability in the user options page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...
Mandriva Linux Security Advisory : pam_mount (MDVSA-2008:208-1)
pammount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount. The updated packages have been patched to fix the issue. Update : The fi...
Denial of Service vulnerability in AVG Anti-Virus (Linux)
This host is installed with AVG Anti-Virus and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbavgavdosvulnlin.nasl 4865 2016-12-28 16:16:43Z teissa $ Denial of Service vulnerability in AVG Anti-Virus Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone...
HTTP Options Detection
Display available HTTP options for each system This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Options Detection', 'Description' = 'Display available HTTP options for each system', 'Author...
Mandriva Update for kernel MDVSA-2008:224 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:224 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for autofs MDVSA-2008:009 (autofs)
Check for the Version of autofs OpenVAS Vulnerability Test Mandriva Update for autofs MDVSA-2008:009 autofs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for kernel MDVSA-2008:224-1 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:224-1 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
SIP Username Enumerator (UDP)
Scan for numeric username/extensions using OPTIONS/REGISTER requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Username Enumerator UDP', 'Description' = 'Scan for numeric...
SIP Endpoint Scanner (UDP)
Scan for SIP devices using OPTIONS requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Endpoint Scanner UDP', 'Description' = 'Scan for SIP devices using OPTIONS requests', 'Author' =...
Vulnerability scanning tools nikto use of experience-vulnerability warning-the black bar safety net
http://www.cirt.net/ official website site http://www.feelids.com/ Author:swap A simple scan of the target basic WEB basic preparation Information, Server, PHP parser and other version information perl nkito.pl –h 192.168.0.1 Multi-port scanning Perl nikto.pl –h 192.168.0.1 –p 8 0, the 8 8, a 4 4...
IBM Tivoli存储管理器远程堆溢出漏洞
BUGTRAQ ID: 34077 CVECAN ID: CVE-2008-4563 Tivoli Storage Manager是一种遵循ANSI SAN标准的可扩展解决方案，用于发现、监控和管理企业SAN架构组件，并可分配和自动操纵企业的附加磁盘存储资源。 Tivoli存储管理器dsmsvc.exe守护程序的adsmdll.dll库存在堆溢出漏洞。有漏洞的函数分配了固定大小的堆缓冲区用于存储会话相关数据，然后将用户提供的值用作了拷贝操作的字节长度。由于缺少边界检查，未经认证的远程攻击者可以通过提交恶意请求触发堆溢出，导致拒绝服务或执行任意代码。 IBM Tivoli Storage...
BlindBlog <= 1.3.1 Multiple Vulnerabilities - Active Check
BlindBlog is prone to a local file include LFI vulnerability and multiple SQL injection SQLi vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
Apache Httpd < 2.2.12 : AllowOverride Options handling bypass
A flaw was found in the handling of the "Options" and "AllowOverride" directives. In configurations using the "AllowOverride" directive with certain "Options=" arguments, local users were not restricted from executing commands from a Server-Side-Include script as intended...
[SECURITY] Fedora 9 Update: cairo-dock-1.6.3.1-1.fc9.3
An light eye-candy fully themable animated dock for any Linux desktop. It has a family-likeness with OSX dock, but with more options...
CMS from Scratch <= 1.9.1 (fckeditor) Remote File Upload Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------------- CMS from Scratch = 1.9.1 fckeditor Remote File Upload Exploit by yeat - stakerathotmaildotit http://scratchwebdesignforums.com/forums/index.php?showtopic=629...
phpslash <= 0.8.1.1 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...