1431 matches found
wordpress Diary/Notebook theme email spoofing vulnerability-vulnerability warning-the black bar safety net
WordPress this Diary/Notebook theme is to have site5 design of a personal Journal blog system theme. The recent burst of the email spoofing vulnerability. Attach the perl script Exp: !/ usr/bin/perl Exploit Title: Diary/Notebook Site5 WordPress Theme - Email Spoofing Date: 15.07.2012 Exploit...
WordPress Theme DiaryNotebook Site5 - Email Spoofing
WordPress Theme DiaryNotebook Site5 - Email Spoofing !/usr/bin/perl Exploit Title: Diary/Notebook Site5 Wordpress Theme - Email Spoofing Date: 15.07.2012 Exploit Author: @bwallHatesTwits Discovered by: @xxDigiPxx...
Citrix Receiver, XenDesktop "Pass-the-hash" Attack
Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...
Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash
Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...
DreamBox DM800 1.5rc1 Remote Root File Disclosure Exploit
Exploit for hardware platform in category remote exploits !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh...
Joomla JRadio Component (com_jradio) Local File Inclusion
No description provided by source. Name :Joomla comjradio LFI Vulnerability Date : Dec,16 2010 Vendor Url :http://joomlacode.org/gf/project/componentjradio/ Dork:inurl:comjradio Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r...
Joomla! Component JRadio - Local File Inclusion
Joomla! Component JRadio - Local File Inclusion Name :Joomla comjradio LFI Vulnerability Date : Dec,16 2010 Vendor Url :http://joomlacode.org/gf/project/componentjradio/ Dork:inurl:comjradio Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...
Joomla JRadio Local File Inclusion
Name :Joomla comjradio LFI Vulnerability Date : Dec,16 2010 Vendor Url :http://joomlacode.org/gf/project/componentjradio/ Dork:inurl:comjradio Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...
Design/Logic Flaw
Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...
KLA10110 ACE vulnerability in Citrix
An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to the ICA graphics packet via a specially designed HTML or ICA document. Original advisories...
Citrix XenApp Online Plug-in / Receiver Crafted Certificate MitM Spoofing Weakness
The version of Citrix Online Plug-in or ICA Client installed on the remote Windows host is affected by an unspecified man-in-the-middle MitM vulnerability. This issue is related to Microsoft security bulletin MS09-056 and is likely due to a failure to detect null bytes in the common name of a...
Apple TV Detection
The remote host is an Apple TV, a digital media receiver. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42825; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/09/29"; scriptnameenglish:"Apple TV Detection";...
CVE-2009-3936
Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...
CVE-2009-3936
CVE-2009-3555 is a TLS/SSL renegotiation vulnerability (renegotiation not properly associated with the existing connection) that can allow MITM attackers to insert data into HTTPS sessions. Public advisories show this issue across multiple open-source components and distributions, including pound...
Fedora Core 9 FEDORA-2009-1366 (gpsdrive)
The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1366. OpenVAS Vulnerability Test $Id: fcore20091366.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1366 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 10 FEDORA-2009-1225 (gpsdrive)
The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1225. OpenVAS Vulnerability Test $Id: fcore20091225.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1225 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...
[SECURITY] Fedora 9 Update: gpsdrive-2.09-7.fc9
Gpsdrive is a map-based navigation system. It displays your position on a zoomable map provided from a NMEA-capable GPS receiver. The maps are autoselected for the best resolution, depending of your position, and the displayed image can be zoomed. Maps can be downloaded from the Internet with one...
Dreambox DM500超长请求拒绝服务漏洞
CNCAN ID:CNCAN-2008090302 Dreambox DM500是一款卫星电视接收设备。 Dreambox DM500 WEB接口处理超长请求存在问题,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 发送超长的HTTP请求给WEB服务程序处理,可导致程序停止响应,造成拒绝服务攻击。 Dreambox DM500 目前没有解决方案提供: http://www.dream-multimedia-tv.de/english/productsdm500.php...
CVE-2007-6103
I Hear U IHU 0.5.6 and earlier allows remote attackers to cause 1 a denial of service infinite loop via a packet that contains zero in the size field in its header, which is improperly handled by the Receiver::processPacket function; and 2 a denial of service daemon crash via an a IHUINFOINIT or ...
CVE-2007-6103
I Hear U IHU 0.5.6 and earlier allows remote attackers to cause 1 a denial of service infinite loop via a packet that contains zero in the size field in its header, which is improperly handled by the Receiver::processPacket function; and 2 a denial of service daemon crash via an a IHUINFOINIT or ...