rtsp-methods NSE Script

Determines which methods are supported by the RTSP real time streaming protocol server. Script Arguments rtsp-methods.path the path to query, defaults to "" which queries the server itself, rather than a specific url. Example Usage nmap -p 554 --script rtsp-methods Script Output PORT STATE SERVIC...

How to Create a Custom SureBackup Test Script

Purpose This article provides information about creating custom SureBackup roles and scripts which can be used to enhance SureBackup testing. Solution Information regarding custom SureBackup roles can be found here: https://helpcenter.veeam.com/docs/backup/vsphere/creatingxmlfiles.html Informatio...

emlog 4.1.0 敏感信息泄漏漏洞

emlog是一款基于PHP和MySQL平台的功能强大的个人博客系统blog，该版本存在敏感信息泄漏的漏洞。 泄露作者名称： http://site/content/cache/user 泄露配置信息 http://site/content/cache/options 漏洞证明 修复方案： 升级最新官方版本，官方链接：www.emlog.net...

Linux kernel-2.6.18-6 x86 Local Root Exploit

No description provided by source. include include include include include include include include define NUMCPUS 8 define ATM "/proc/net/atm/avc" int mainvoid char err, adurit2000; int i, ret, sock, proc; struct atmqos dj; struct sockaddratmsvc addr; sock = socketPFATMSVC, SOCKDGRAM, 0; memset&d...

WebCookiesSniffer - New cookies sniffer/viewer utility

WebCookiesSniffer - New cookies sniffer/viewer utility WebCookiesSniffer is a new packet sniffer utility that captures all web site cookies sent between the web browser and the web server and displays them in a simple cookies table. The upper pane of WebCookiesSniffer displays the cookie string...

http-cors NSE Script

Tests an http server for Cross-Origin Resource Sharing CORS, a way for domains to explicitly opt in to having certain methods invoked by another domain. The script works by setting the Access-Control-Request-Method header field for certain enumerated methods in OPTIONS requests, and checking the...

Fedora 14 : openldap-2.4.23-10.fc14 (2011-3627)

Changes not covered by bugs : - removed slurpd options from sysconfig/ldap - fix: possible NULL pointer dereference in NSS implementation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 15 Update: foomatic-4.0.8-3.fc15

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. This package contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database packaged separately. There is also the...

Pscan 2.0 - multi threaded TCP Syn port scanner

Pscan 2.0 - multi threaded TCP Syn port scanner TCP Port scanner Multi threaded with possibility to scan 65535. TCP ports on an IP address.You can specify how many threads to run and the timeout. Further more it will tell you the MAC address of the target and the service runningFor LINUX and...

quake3-info NSE Script

Extracts information from a Quake3 game server and other games which use the same protocol. Example Usage nmap -sU -sV -Pn --script quake3-info.nse -p Script Output PORT STATE SERVICE VERSION 27960/udp open quake3 Quake 3 dedicated server | quake3-info: | PLAYERS: | 1. cyberix frags: 0/20, ping: ...

CVE-2011-2837

Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecified impact and attack vectors...

CVE-2011-2837

Removed by vendor...

THC-HYDRA v7.0 new version released for Download

THC-HYDRA v7.0 new version released for Download THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from...

kernel: dccp: handle invalid feature options length

Integer underflow in the dccpparseoptions function net/dccp/options.c in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol DCCP packet with an invalid feature options length, which triggers a buffer over-read...

Inline attachment downloads vulnerable to XSS by setting tweaked HTML content type

Please see CONFDEV-9069 https://jira.atlassian.com/browse/CONFDEV-9069 for the current issue addressed at fixing attachment XSS vulnerabilities. --- TLDR: white-list mime-types which can be served "inline" and don't let the user set arbitrary mime-types. I have been having a good laugh sorry...

LifeSize Room 3.5.3 / 4.7.18 Command Injection

require 'msf/core' class Metasploit3 'LifeSize Room Command Injection', 'Description' = %q This module exploits a vulnerable resource in LifeSize Room versions 3.5.3 and 4.7.18 to inject OS commmands. LifeSize Room is an appliance and thus the environment is limited resulting in a small set of...

Ubuntu Update for foomatic-filters USN-1194-1

Ubuntu Update for Linux kernel vulnerabilities USN-1194-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11941.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for foomatic-filters USN-1194-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1194-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: libvirt security and bug fix update

Updated libvirt packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Siemens Gigaset IP Series SIP Username Enumeration

Siemens Gigaset ip series sip username enumeration Author: francesco.tornieri "At" verona-wireless.net Summary: Sip responses permit user identification Release Date: 23/08/2011 Criticality level: Low Impact: Information leak Device: Siemens Gigaset IP series Tested A580IP Description: I've...