CVE-2007-2413

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2459. Reason: This candidate is a duplicate of CVE-2007-2459. Notes: All CVE users should reference CVE-2007-2459 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Hacking tricks build antivirus search within a folder-bug warning-the black bar safety net

Since installing the antivirus software and then each time they open there hack tool folder, it will frequently pop-up alarm window, and one missed to press“OK”, the hard to accumulate the program will be“gone with the wind”. Several times down, my“memory food”has almost disappeared lazy to do, i...

PHP Easy Downloader <= 1.5 (save.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== PHP Easy Downloader +------------------------------------------------------------------------------------------- + Details: + PHP Easy Download by default installation...

The Linux system under the Network Monitor technology-vulnerability warning-the black bar safety net

Preface:in the network, when the information propagation time, you can use the tool, a network interface set in monitor mode, it will be the network is the dissemination of information intercepted or captured, thereby performing the attack. Network monitoring in the network in any one location mo...

CVE-2005-0528

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0985. Reason: This candidate is a duplicate of CVE-2003-0985. Notes: All CVE users should reference CVE-2003-0985 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-4209

WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting XSS...

SimplePHPBlog Arbitrary File Deletion and Sample Exploit

SimplePHPBlog has a vulnerability in its commentdeletecgi.php. The PHP script allows for the arbitrary deletion of files. Please see following link for a perl script to demonstrate the exploit: http://www.ftusecurity.com/pub/sphpblogvulns Please add .pl extension as my ISP server preprocesses the...

CVE-2005-1334

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1579. Reason: This candidate is a duplicate of CVE-2005-1579. Notes: All CVE users should reference CVE-2005-1579 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Exclude top-level domain wildcard hosts

This host has an IP address known to be a wildcard record for a top- level domain TLD or for a host within the 'nessus.org' domain. It has been blacklisted and will not be scanned. C Tenable Network Security, Inc. Known top level domain wildcards, from http://www.imperialviolet.org/dnsfix.html .C...

Web Wiz Forums wwforum.mdb Direct Request Database Disclosure

The remote server is running Web Wiz Site Forum, a set of ASP scripts to manage online forums. This release comes with a 'wwforum.mdb' database, usually located under 'admin', that contains sensitive information, such as the user passwords and emails. An attacker may use this flaw to gain...

SimpleChat Information Disclosure

It is possible to retrieve list of users currently connected to the remote SimpleChat server by requesting the file 'data/usr'. An attacker may use this flaw to obtain the IP address of every user currently connected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: 20 Mar 2003...

Unpassworded 'sync' Account

The account 'sync' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "sync"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11247; scriptversion"1.34";...

Oracle Database Listener Program (tnslsnr) Service Blank Password

The remote Oracle Listener Program tnslsnr has no password assigned. An attacker may use this fact to shut it down arbitrarily, thus preventing legitimate users from using it. %NASLMINLEVEL 70300 oracletnslsnrsecurity.nasl - NASL script to do a TNS STATUS command against the Oracle tnslsnr and gr...

Security Update for Windows XP x64 Edition (KB974571)

A security issue has been identified that could allow an attacker to misrepresent a system action or behavior without the knowledge of the user. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...