TLS Renegotiation Vulnerability PoC Exploit

No description provided by source. !/usr/bin/env python RedTeam Pentesting GmbH [email protected] http://www.redteam-pentesting.de PoC exploit for the TLS renegotiation vulnerability CVE-2009-3555 License ------- CC-BY-SA http://creativecommons.org/licenses/by-sa/3.0/ Timeline -------...

phUploader 2 - Arbitrary File Upload

phUploader 2 - Arbitrary File Upload Exploit Title: phUploader Remote File Upload Vulnerability Date: 20-12-2009 Author: wlhaan-hacker Version: v2 CVE : N/A ========================================================================== Script Name : phUploader Language : php email: [email protected]...

Drupal Module Sections - Cross-Site Scripting

Drupal Module Sections - Cross-Site Scripting The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

Drupal Sections Module XSS Vulnerability

No description provided by source. The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides...

Drupal 6.14 with Sections 6.x-1.2 multiple XSS

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system...

Drupal Sections Module XSS Vulnerability

Exploit for unknown platform in category web applications ======================================== Drupal Sections Module XSS Vulnerability ======================================== The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability:...

Mandriva Security Advisory MDVSA-2009:217-3 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory MDVSA-2009:217-3. OpenVAS Vulnerability Test $Id: mdksa20092173.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:217-3 mozilla-thunderbird Authors: Thomas Reinke...

SuSE Security Advisory SUSE-SA:2009:060 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:060. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

SA permissions are nine kinds of upload methods-vulnerability warning-the black bar safety net

SA rights is very large,but may be some friends feel inconvenient to use,the next and everyone together to discuss several Upload File method,if there's another way,I hope you made,the technology,the more the defense plays, the more bright the higher. First, NBSI command method:write the word woo...

FreeBSD 'freebsd-update'工具不安全目录权限漏洞

Bugraq ID: 37190 FreeBSD是一款开放源代码的基于BSD的操作系统。 freebsd-update8工具用于下载，安装，升级。当通过'freebsd-update fetch'或 'freebsd-update upgrade'下载升级时，freebsd-update8工具会拷贝当前安装文件到工作目录默认为/var/db/freebsd-update，用于配置文件的合并更改，并能够回滚安装的更新。...

SUSE: Security Advisory for java-1_6_0-sun (SUSE-SA:2009:058)

The remote host is missing updates announced in advisory SUSE-SA:2009:058. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

SuSE Security Advisory SUSE-SA:2009:058 (java-1_6_0-sun)

The remote host is missing updates announced in advisory SUSE-SA:2009:058. OpenVAS Vulnerability Test $Id: susesa2009058.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:058 java-160-sun Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SA-CONTRIB-2009-106 - Agreement - Cross Site Scripting

The Agreement module enables the display of a text-based agreement think "Terms of Service" that users of a particular role must accept before they are given access to the site. The module does not sanitize some of the user-supplied fields, leading to a Cross Site Scripting XSS vulnerability...

SuSE Security Advisory SUSE-SA:2009:051 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:051. OpenVAS Vulnerability Test $Id: susesa2009051.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:051 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SUSE: Security Advisory for MozillaFirefox (SUSE-SA:2009:052)

The remote host is missing updates announced in advisory SUSE-SA:2009:052. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

[SECURITY] [DSA 1930-1] New drupal6 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1930-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 07, 2009 http://www.debian.org/security/faq -...

SA-CONTRIB-2009-092 - S5 Presentation Player Cross Site Scripting

The S5 Presentation Player module enables the creation of an S5 slideshow using content from the site. The module does not properly sanitize user supplied text it includes in the HTML HEAD section, leading to a cross-site scripting XSS vulnerability. Such an attack may lead to a malicious user...

SA-CONTRIB-2009-085 - Insert Node - Cross Site Scripting

The Insert Node module provides an input filter that enables a node to be inserted within the body field of another node. The module fails to sanitize the inserted node, making it vulnerable to a cross site scripting XSS attack. Versions affected Insert Node module versions for Drupal 5.x prior t...

SUSE: Security Advisory for MozillaFirefox (SUSE-SA:2009:048)

The remote host is missing updates announced in advisory SUSE-SA:2009:048. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

SuSE Security Advisory SUSE-SA:2009:048 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:048. OpenVAS Vulnerability Test $Id: susesa2009048.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:048 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...