PHP Nuke 8.3 MT Shell Upload

Iranian Pentesters Home Title : PHP Nuke 8.3 MT Arbitrary File Upload Vulnerability Author : Pentesters.ir Exploits Coded by : b3hz4d & 4n0nym0us Tested on: PHP Nuke 8.3 Vendor : http://phpnuke.ir Specially Thanks To: Navid, Hossein, Ahmad, vahid, daryoush and all of the pentesters.ir members...

TmaxSoft JEUS Alternate Data Streams Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: TmaxSoft JEUS Alternate Data Streams Vulnerability Author: Simon Ryeobar4mi at gmail Severity: High Impact: Remote File Disclosure Vulnerable Version: JEUS 5: Fix26 on NTFS References: -...

DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame. Aruba Advisory ID: AID-12808 Revision: 1.0 For Public Release on 12/8/2008 +----------------------------------------------------...

GNU Coreutils 'pam_succeed_if' PAM本地验证绕过漏洞

BUGTRAQ ID: 30363 CVE ID:CVE-2008-1946 CNCVE ID：CNCVE-20081946 GNU Coreutils是一款提供一整套基本的shell工具的软件包。 GNU Coreutils存在验证绕过问题，本地攻击者可以利用漏洞运行'su'命令来获得对锁住或过期帐户的访问。 配置文件中针对"su"命令没有正确的使用pamsucceedif PAM，如果目标帐户的密码被运行"su"命令的用户知道的情况下，可使用此命令更改锁住或过期用户帐户。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES ...

GD图形库JIS编码字体缓冲区溢出漏洞

GD Graphics Library是一款流行的图形库，用于动态图象建立。 GD图形库处理JIS编码字体存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理特殊畸形的字符串时如果使用了JIS编码字体，由于NULL终止符的增加，会导致不可预料的结果，可能导致以应用程序进程权限任意指令执行。 RedHat Enterprise Linux WS 5 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 5 RedHat Enterprise Linux ES 4 RedHat Enterprise Linu...

HP-UX Security patch : PHKL_22701

The remote host is missing HP-UX Security Patch number PHKL22701 . Sec. Vulnerability in setrlimit1M rev. 1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17102; scriptversion"1.7"...

HP-UX Security patch : PHCO_10059

The remote host is missing HP-UX Security Patch number PHCO10059 . Security Vulnerability in vgdisplay command %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16887;...

HP-UX PHSS_17483 : s700_800 11.00 MC/LockManager A.11.05 (English) Patch

s700800 11.00 MC/LockManager A.11.05 English Patch : MC/ServiceGuard and MC/LockManager exhibit improper implementation of restricted SAM functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS17483...

HP-UX Security patch : PHSS_19482

The remote host is missing HP-UX Security Patch number PHSS19482 . Security Vulnerability in rpc.cmsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16537; scriptversion"1.7";...

HP-UX Security patch : PHCO_28142

The remote host is missing HP-UX Security Patch number PHCO28142 . SSRT3454 Security vulnerability in sort1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17083; scriptversion"1.7"...

HP-UX Security patch : PHCO_20871

The remote host is missing HP-UX Security Patch number PHCO20871 . Sec. Vulnerability in bdf1 & df1 commands %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16913; scriptversion"1.8...

HP-UX Security patch : PHNE_12866

The remote host is missing HP-UX Security Patch number PHNE12866 . Security Vulnerability in sendmail %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16880; scriptversion"1.7";...

HP-UX Security patch : PHSS_26367

The remote host is missing HP-UX Security Patch number PHSS26367 . Sec. Vulnerability in SNMP rev. 16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16562; scriptversion"1.6";...

HP-UX Security patch : PHSS_17482

The remote host is missing HP-UX Security Patch number PHSS17482 . Security Vulnerability in MC/ServiceGuard & MC/LockManager %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16661;...

HP-UX Security patch : PHNE_13468

The remote host is missing HP-UX Security Patch number PHNE13468 . Security Vulnerability with land on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16533; scriptversion"1.7...

HP-UX PHSS_22062 : HPSBUX0008-119 Sec. Vulnerability OpenView NNM 6.1 (rev.1)

s700800 11.00 OV NNM6.1 ovlaunch focus in login field : Web password protection is not robust for local users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS22062. The text itself is copyright C...

HP-UX Security patch : PHSS_20476

The remote host is missing HP-UX Security Patch number PHSS20476 . Security Vulnerability in VVOS TGP %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16950; scriptversion"1.7";...

HP-UX Security patch : PHSS_25136

The remote host is missing HP-UX Security Patch number PHSS25136 . Sec. Vulnerability in rpc.ttdbserverd rev.3 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16969;...

HP-UX Security patch : PHCO_22411

The remote host is missing HP-UX Security Patch number PHCO22411 . Sec. Vulnerability in lpspooler %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16829; scriptversion"1.7";...

[SA14124] Mambo Global Variables Security Bypass Vulnerability

TITLE: Mambo Global Variables Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14124 VERIFY ADVISORY: http://secunia.com/advisories/14124/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Mambo 4.x http://secunia.com/product/872/ DESCRIPTION: A vulnerability...