FreePBX Remote Exploit

FreePBX web interface remote vulnerability The admin username and password for the web interface is stored in plain text in this publicly accessible file: http://yourip/admin/modules/framework/bin/genampconf.php Which allows a hacker to access the web GUI and view the secretspasswords for each...

STHS v2 Web Portal 'team' parameter Multiple SQLi Vulnerabilities

STHS v2 Web Portal is prone to multiple SQL injection SQLi vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

Sonexis ConferenceManager Multiple Information Disclosure and Security Bypass Vulnerabilities

Sonexis ConferenceManager is prone to remote information-disclosure and security-bypass vulnerabilities. An attacker may exploit these issues to obtain sensitive information and bypass certain security restrictions. Sonexis ConferenceManager versions 10.0.40 and prior are vulnerable. OpenVAS...

Microsoft Windows ASX File Parsing Remote Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote buffer-overflow vulnerability when handling a specially crafted media file. An attacker can exploit this issue by enticing an unsuspecting user to view a webpage containing malicious content or to open a malicious media file. Successful exploits...

Edraw Diagram Component 5 - ActiveX Control LicenseName() Method Buffer Overflow

Edraw Diagram Component 5 - ActiveX Control LicenseName Method Buffer Overflow source: https://www.securityfocus.com/bid/51866/info Edraw Diagram Component ActiveX control 'EDBoard.ocx' is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on...

Joomla! Component com_propertylab - id SQL Injection

Joomla! Component compropertylab - id SQL Injection source: https://www.securityfocus.com/bid/51729/info The 'compropertylab' component for Joomla! is prone to a remote SQL injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

[SECURITY] [DSA 2394-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2394-1 [email protected] http://www.debian.org/security/ Luciano Bello January 27, 2012 http://www.debian.org/security/faq -...

EPractize Labs Subscription Manager 'showImg.php' PHP Code Injection Vulnerability

EPractize Labs Subscription Manager is prone to a remote PHP code- injection vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

miniCMS Multiple Remote PHP Code Injection Vulnerabilities

miniCMS is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected application and possibly the underlying computer. miniCMS 1.0 and 2.0 are...

miniCMS Multiple Remote PHP Code Injection Vulnerabilities

miniCMS is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Joomla Some Component LFI Vulnerability (Jan 2012) - Active Check

Joomla Some component is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Linux Kernel IGMP Remote Denial Of Service Vulnerability

This host is running Linux and prone to remote denial of service vulnerability. OpenVAS Vulnerability Test $Id: gblinuxkerneligmpdosvuln.nasl 7141 2017-09-15 09:58:49Z cfischer $ Linux Kernel IGMP Remote Denial Of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone...

JDK: unspecified vulnerability fixed in 6u29 (Swing)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

VulnCheck KEV: CVE-2010-0842

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

OpenJDK: mutable static AWTKeyStroke.ctor (AWT, 7019773)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

[SECURITY] [DSA 2383-1] super security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2383-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 08, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2381-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2381-1 [email protected] http://www.debian.org/security/ Florian Weimer January 06, 2012 http://www.debian.org/security/faq -...

JP1/Cm2/Network Node Manager i Denial of Service (DoS) Vulnerability

Overview JP1/Cm2/Network Node Manager i NNMi contains vulnerabilities could allow a remote attacker to cause a denial of service DoS condition or execute arbitrary code. Impact A remote attacker could cause a denial of service DoS condition or execute arbitrary code. Solution Please refer to the...

[SECURITY] [DSA 2377-1] cyrus-imapd-2.2 security update

--------------------------------------------------------------------------- Debian Security Advisory DSA-2377-1 [email protected] http://www.debian.org/security/ Nico Golde Jan 1st, 2012 http://www.debian.org/security/faq -...

telnet-encryption NSE Script

Determines whether the encryption option is supported on a remote telnet server. Some systems including FreeBSD and the krb5 telnetd available in many Linux distributions implement this option incorrectly, leading to a remote root vulnerability. This script currently only tests whether encryption...