PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities

PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "PHP-Calendar is a simple web calendar. It is targeted towards groups that need to collaboratively create and track events. In that same collaborative spirit, the source for...

Cacti Multiple Parameter Cross Site Scripting Vulnerabilities

Cacti Multiple Parameter Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "Cacti is a complete network graphing solution designed to harness the power of RRDTool's data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple da...

ESET Smart Security 4.2 / NOD32 Antivirus 4.2 (x32-x64) LZH parsing PoC

Exploit for windows platform in category dos / poc ======================================================================= ESET Smart Security 4.2 / NOD32 Antivirus 4.2 x32-x64 LZH parsing PoC ======================================================================= ESET Smart Security 4.2 and NOD3...

Inconsistent Hostname and IP Address

The name of this machine either does not resolve or resolves to a different IP address. This may come from a badly configured reverse DNS or from a host file in use on the Nessus scanning host. As a result, URLs in plugin output may not be directly usable in a web browser and some web tests may b...

Joomla! Component JInventory 1.23.02 - Local File Inclusion

--------------------------------------------------------------------------------- Joomla Component JInventory Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected] Date ...

AIX 530010 : U830142

The remote host is missing AIX PTF U830142 which is related to the security of the package devices.pci.2b102725.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Sybase SQL Anywhere Server Suspicious Command Detection

Binary data 5468.prm...

Sybase SQL Anywhere Server Suspicious Command Detection

Binary data 5476.prm...

HAURI Anti-Virus ACE Archive Handling Buffer Overflow (CVE-2005-2720)

HAURI anti-virus is a product line consisting of several antivirus scanners for both desktop and server systems. The product line is capable of scanning inside archived files. It supports numerous archive formats, one of which is the widely used ACE compression format. A buffer overflow...

snmp-interfaces NSE Script

Attempts to enumerate network interfaces through SNMP. This script can also be run during Nmap's pre-scanning phase and can attempt to add the SNMP server's interface addresses to the target list. The script argument snmp-interfaces.host is required to know what host to probe. To specify a port f...

CA Products AV Engine CHM File Handling Denial of Service (CVE-2007-3875)

CA provides an anti-virus engine that is shared among multiple applications and products. The anti-virus engine is capable of scanning files stored in numerous archive format. One of these archive formats is the Microsoft compiled help files, as known as CHM. There exists a denial of service...

VNC Password Authentication bypass vulnerability attack case study-vulnerability warning-the black bar safety net

By this case can learn to: 1for the VNC Password Authentication bypass vulnerability 2The use of VNC Password Authentication bypass exploit tool software overflow vulnerability exists in the computer Bit networkthe expert feature articles on:RealVNCreferred to as VNCsoftware has free edition,...

jQuery Validate 1.6.0 Cross Site Scripting

+----------------------------------------------+ ADVISORY – jQuery Validate 1.6.0 Demo Code AFFECTED PACKAGES jQuery Validate 1.6.0 SilverStripe 2.3.X to 2.3.5 Discovered By CodeScan.com +----------------------------------------------+ Vendor's Website:...

Debian DSA-2002-1 : polipo - denial of service

Several denial of service vulnerabilities have been discovered in polipo, a small, caching web proxy. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3305 A malicous remote server could cause polipo to crash by sending an invalid Cache-Control heade...

CVE-2010-0106

The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service prevention of on-demand scanning via "specific events" that prevent...

Algorithm Stops Local Scanning Worms

Researchers at Penn State University have developed an algorithm that defends against the spread of local scanning worms that search for hosts in “local” spaces within networks or sub-networks. This strategy allows them access to hosts that are clustered, which means once they infect one host, th...

dns-zone-transfer NSE Script

Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain script argument. If the query is...

mysql-variables NSE Script

Attempts to show all variables on a MySQL server. Script Arguments mysqluser The username to use for authentication. If unset it attempts to use credentials found by mysql-brute or mysql-empty-password. mysqlpass The password to use for authentication. If unset it attempts to use credentials foun...

Botnets Hit Perl Testers With Denial of Service Attack

According to a posting on the CPAN Testers’ blog, the CPAN Testers’ server has been being aggressively scanned by “20-30 bots every few seconds” in what they call “a dedicated denial of service attack”; these bots “completely ignore the rules specified in robots.txt”. Read the full article. The H...

Movable Type Detection

Detection of Movable Type. The script sends a connection request to the server and attempts to extract the version number from the reply. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced source...