Citrix Receiver / Online Plug-in Remote Code Execution (CTX134681)

Citrix Receiver prior to 3.3 or Citrix Online Plug-in prior to 12.3 is installed on the remote Windows host. As such, the install is potentially affected by an unspecified code execution vulnerability. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary code on the...

wordpress Diary/Notebook theme email spoofing vulnerability-vulnerability warning-the black bar safety net

WordPress this Diary/Notebook theme is to have site5 design of a personal Journal blog system theme. The recent burst of the email spoofing vulnerability. Attach the perl script Exp: !/ usr/bin/perl Exploit Title: Diary/Notebook Site5 WordPress Theme - Email Spoofing Date: 15.07.2012 Exploit...

WordPress Theme DiaryNotebook Site5 - Email Spoofing

WordPress Theme DiaryNotebook Site5 - Email Spoofing !/usr/bin/perl Exploit Title: Diary/Notebook Site5 Wordpress Theme - Email Spoofing Date: 15.07.2012 Exploit Author: @bwallHatesTwits Discovered by: @xxDigiPxx...

Citrix Receiver, XenDesktop "Pass-the-hash" Attack

Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...

Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash

Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...

DreamBox DM800 1.5rc1 Remote Root File Disclosure Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh...

Joomla JRadio Component (com_jradio) Local File Inclusion

No description provided by source. Name :Joomla comjradio LFI Vulnerability Date : Dec,16 2010 Vendor Url :http://joomlacode.org/gf/project/componentjradio/ Dork:inurl:comjradio Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r...

Joomla JRadio Local File Inclusion

Name :Joomla comjradio LFI Vulnerability Date : Dec,16 2010 Vendor Url :http://joomlacode.org/gf/project/componentjradio/ Dork:inurl:comjradio Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Joomla! Component JRadio - Local File Inclusion

Joomla! Component JRadio - Local File Inclusion Name :Joomla comjradio LFI Vulnerability Date : Dec,16 2010 Vendor Url :http://joomlacode.org/gf/project/componentjradio/ Dork:inurl:comjradio Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Design/Logic Flaw

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...

CVE-2010-2990: Improper Restriction of Operations within the Bounds of a Memory Buffer

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...

KLA10110 ACE vulnerability in Citrix

An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to the ICA graphics packet via a specially designed HTML or ICA document. Original advisories...

Citrix XenApp Online Plug-in / Receiver Crafted Certificate MitM Spoofing Weakness

The version of Citrix Online Plug-in or ICA Client installed on the remote Windows host is affected by an unspecified man-in-the-middle MitM vulnerability. This issue is related to Microsoft security bulletin MS09-056 and is likely due to a failure to detect null bytes in the common name of a...

Apple TV Detection

The remote host is an Apple TV, a digital media receiver. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42825; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/09/29"; scriptnameenglish:"Apple TV Detection";...

CVE-2009-3936

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

CVE-2009-3936

CVE-2009-3555 is a TLS/SSL renegotiation vulnerability (renegotiation not properly associated with the existing connection) that can allow MITM attackers to insert data into HTTPS sessions. Public advisories show this issue across multiple open-source components and distributions, including pound...

CVE-2009-3936: Undefined Security Weakness

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

Fedora Core 9 FEDORA-2009-1366 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1366. OpenVAS Vulnerability Test $Id: fcore20091366.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1366 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-1225 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1225. OpenVAS Vulnerability Test $Id: fcore20091225.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1225 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...

[SECURITY] Fedora 9 Update: gpsdrive-2.09-7.fc9

Gpsdrive is a map-based navigation system. It displays your position on a zoomable map provided from a NMEA-capable GPS receiver. The maps are autoselected for the best resolution, depending of your position, and the displayed image can be zoomed. Maps can be downloaded from the Internet with one...