3Com* iMC (Intelligent Management Center) - Traversal File Retrieval

PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity: High...

ChillyCMS - Blind SQL Injection

ChillyCMS - Blind SQL Injection !/usr/bin/hybris Exploit Title: ChillyCMS Blind Sql Injection Date: 14-05-2010 Author: IHTeam Software Link: http://chillycms.bplaced.net/chillyCMS/core/show.site.php?id=9 Version: 1.1.2 Tested on: Win/Linux Example: user@user Advisories$ hybris chillycms.hy...

MOPS-2010-018: EFront ask_chat chatrooms_ID SQL Injection Vulnerability

MOPS-2010-018: EFront askchat chatroomsID SQL Injection Vulnerability May 9th, 2010 A preauth SQL injection vulnerability was discovered in the chat feature of EFront that allows retrieving all data from the database by simple URL manipulation. Affected versions Affected is EFront = 3.6.2 Credits...

ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability

ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-070 April 13, 2010 -- CVE ID: CVE-2010-0268 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows Media Player 9 --...

CVE-2009-4511: TANDBERG VCS Arbitrary File Retrieval

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Arbitrary File Retrieval Release Date:...

Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. The specific flaw exists within the functionality for...

Tandberg VCS Arbitrary File Retrieval

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Arbitrary File Retrieval Release Date:...

Memory Information (via DMI)

Using the SMBIOS aka DMI interface, it was possible to retrieve information about the remote system's memory devices, such as the total amount of installed memory. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid45433; scriptversion "1.3"; scriptcvsdate"Date: 2018/03/2...

Information disclosure

The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2...

Apple Releases Security Update 2010-002 and Mac OS X v10.6.3

Apple has released Security Update 2010-002 and Mac OS X v10.6.3 to address multiple vulnerabilities that affect a number of applications. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, cause a denial-of-service condition, bypass security...

XSLT can be used to retrieve random contents of unrelated documents

XSLT is normally subject to strict controls, preventing documents from separate Web sites from reading the contents of other sites. Certain XSLT constructs can cause Opera to retrieve the wrong contents for the resulting document. These contents will appear randomly from the cached versions of an...

Easynet Forum Host (topic.php) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================= Easynet Forum Host topic.php SQL Injection Vulnerbility ========================================================= Exploit Title: Easynet Forum Host topic.php SQL Injection...

Fedora Update for fetchmail FEDORA-2010-3800

Check for the Version of fetchmail OpenVAS Vulnerability Test Fedora Update for fetchmail FEDORA-2010-3800 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 12 Update: fetchmail-6.3.11-4.fc12

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

Joomla Component com_ice Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Joomla Component comice Blind SQL Injection Vulnerability ========================================================== !/usr/bin/php 1 $url = $argv1; $r =...

Mandriva Update for microcode_ctl MDVA-2010:052 (microcode_ctl)

Check for the Version of microcodectl OpenVAS Vulnerability Test Mandriva Update for microcodectl MDVA-2010:052 microcodectl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Re: Samba Remote Zero-Day Exploit

Samba Remote Directory Traversal logic fuckup discovered & exploited by Kingcope in 2010 It seems there was a quite similar bug found back in 2004: http://marc.info/?l=bugtraq&m=109658688505723&w=2 A remote attacker can read, list and retrieve nearly all files on the System remotely. Required is ...

Microsoft Internet Explorer information leak

It's possible to retrieve any file from client computer via URLMON and Dynamic OBJECT tag...

lexmark-config NSE Script

Retrieves configuration information from a Lexmark S300-S400 printer. The Lexmark S302 responds to the NTPRequest version probe with its configuration. The response decodes as mDNS, so the request was modified to resemble an mDNS request as close as possible. However, the port 9100/udp is listed ...

Chess game site program 0DAY-vulnerability warning-the black bar safety net

Accurate point should be regarded as Trojan inurl:Find. asp your location customer service center retrieve password Directly horses: http://www.xxxx.net/user/situjiaduotu2.asp Word virus ,password : value http://www.xxxx.net/htmledit/Include/upfileclass.asp...