plone -- Remote Security Bypass

Plone developer reports: This is an escalation of privileges attack that can be used by anonymous users to gain access to a Plone site's administration controls, view unpublished content, create new content and modify a site's skin. The sandbox protecting access to the underlying system is still ...

SuSE 11 Security Update : libvirt (SAT Patch Number 2787)

Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host. CVE-2010-2242 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Intellicom Netbiter webSCADA Products - read.cgi Multiple Remote Security Vulnerabilities

Intellicom Netbiter webSCADA Products - read.cgi Multiple Remote Security Vulnerabilities source: https://www.securityfocus.com/bid/43636/info Intellicom Netbiter webSCADA products are prone to multiple remote security vulnerabilities, including a directory-traversal vulnerability, an...

Adobe Flash Media Server Multiple Remote Security Vulnerabilities

Adobe Flash Media Server is prone to multiple remote security vulnerabilities, including multiple denial-of-service vulnerabilities and a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

iscripts Socialware 2.2.x - Multiple Vulnerabilities

iscripts Socialware 2.2.x - Multiple Vulnerabilities /iScripts SocialWare 2.2.x Multiple Remote Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass source: https://www.securityfocus.com/bid/40255/info McAfee Email Gateway is prone to a security-bypass vulnerability because the web-based interface fails to properly perform user-profile checks. Attackers can exploit th...

McAfee Email Gateway 6.7.1 - 'systemWebAdminConfig.do' Remote Security Bypass

source: https://www.securityfocus.com/bid/40255/info McAfee Email Gateway is prone to a security-bypass vulnerability because the web-based interface fails to properly perform user-profile checks. Attackers can exploit this issue to bypass certain security restrictions to edit property and...

Default credentials

The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obtain sensitive information by reading the username and password fields...

OpenOffice VBA Macro Restrictions Remote Security Bypass Vulnerability

This host has OpenOffice running which is prone to remote security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbopenofficevbamacrosettsecbypassvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ OpenOffice VBA Macro Restrictions Remote Security Bypass Vulnerability Authors: Veerendra G...

Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)

Media Jukebox 8.0.400 - Local Buffer Overflow SEH Metasploit $Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

OpenOffice.org Multiple Vulnerabilities - Oct09 (Windows)

The host has OpenOffice.org installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultvulnoct09.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenOffice.org Multiple Vulnerabilities - Oct09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networ...

OpenOffice.org Multiple Vulnerabilities (Oct 2009) - Windows

OpenOffice.org is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security

HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security source: https://www.securityfocus.com/bid/36258/info HP Operations Dashboard is prone to a remote security vulnerability. Operations Dashboard 2.1 for Windows is vulnerable; other versions may also be vulnerable. Attacke...

HP Operations Manager - Default Manager 8.1 Account Remote Security

source: https://www.securityfocus.com/bid/36253/info HP Operations Manager is prone to a remote security vulnerability. Operations Manager 8.1 for Windows is vulnerable; other versions may also be vulnerable. NOTE: This issue may be related to the issue documented in BID 37086 HP Operations Manag...

HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security

source: https://www.securityfocus.com/bid/36258/info HP Operations Dashboard is prone to a remote security vulnerability. Operations Dashboard 2.1 for Windows is vulnerable; other versions may also be vulnerable. Attackers can exploit this issue using readily available tools. The following...

CmsFaethon 2.2.0 - item SQL Injection

CmsFaethon 2.2.0 - item SQL Injection !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Free Download Manager多个远程安全漏洞

CVECAN ID: CVE-2009-0183,CVE-2009-0184 Free Download Manager是一种强大易用而且免费的网络下载管理及加速软件。 Free Download Manager的实现上存在多个远程安全漏洞，远程攻击者可能利用此漏洞控制运行了FDM的用户系统。 Free Download Manager处理torrent文件中的文件名、注释、URL等字串时存在堆或栈缓冲区溢出，攻击者可能通过诱使用户处理恶意的torrent文件触发漏洞控制用户系统。FDM的Remote Control...

[SECURITY] Fedora 9 Update: nessus-core-2.2.11-1.fc9

Nessus is the world's most popular vulnerability scanner used in over 75,000 organizations world-wide. Many of the world's largest organizations are realizing significant cost savings by using Nessus to audit business-critic al enterprise devices and applications. The "Nessus" Project was started...

e107 Plugin lyrics_menu - 'l_id' SQL Injection

e107 Plugin lyricsmenu lyricssong.php lid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 30/10/2008 saat 23:36 thek@m!l'lerdeyim a.q : n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork: allinurl:"lyricsmenu/lyricssong.php?lid=" exploi...

McAfee Encrypted USB Manager Remote Security Bypass Vulnerability

McAfee Encrypted USB Manager is prone to a sensitive information disclosure vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...