Tracks 1.7.2 Cross Site Scripting

Information -------------------- Name : XSS vulnerability in Tracks Software : Tracks 1.7.2. Vendor Hompeage : http://getontracks.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-003 Description ------------------ Tracks is a...

Mozilla Thunderbird 3.1 < 3.1.9 Invalid HTTP Certificates

The installed version of Thunderbird 3.1 is earlier than 3.1.9. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affect...

[DSECRG-11-009] SAP NetWaver XI SOAP Adapter - XSS

DSECRG-11-009 SAP NetWaver XI SOAP Adapter - XSS SAP NetWeaver 7.0 application XI SOAP Adapter has linked XSS vulnerability Digital Security Research Group DSecRG Advisory DSecRG-11-009 Internal DSecRG-00120 Application: SAP NetWeaver Versions Affected: SAP NetWeaver XI SOAP Adapter 3.0-7.11 Vend...

[DSECRG-11-010] SAP NetWeaver logon.html - XSS

DSECRG-11-010 SAP NetWeaver logon.html - XSS SAP NetWeaver BSP logon page has linked XSS vulnerability. Digital Security Research Group DSecRG Advisory DSecRG-11-010 Internal DSecRG-00127 Application: SAP NetWeaver Versions Affected: SAP NetWeaver SAPBASIS 620-730 Vendor URL: http://www.sap.com...

IBM Lotus Sametime Server stconf.nsf messageString Parameter XSS

The version of Lotus Sametime on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'messageString' parameter of the 'stconf.nsf' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a...

Majordomo2 _list_file_get() Directory Traversal

This module exploits a directory traversal vulnerability present in the listfileget function of Majordomo2 help function. By default, this module will attempt to download the Majordomo config.pl file. This module requires Metasploit: https://metasploit.com/download Current source:...

Safari < 5.0.4 Multiple Vulnerabilities

Binary data 801013.prm...

Debian DSA-2180-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsing of...

Debian DSA-2166-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0777 Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly ha...

CouchDB < 1.0.2 Cross Site Scripting Issue

Binary data 5755.prm...

Nmap NSE: NetBIOS Stat

This script attempts to retrieve the remote system's NetBIOS names and MAC address. This is a wrapper on the Nmap Security Scanner's http://nmap.org nbstat.nse. OpenVAS Vulnerability Test $Id: gbnmapnbstat.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap NetBIOS Stat NSE script. Authors:...

Nmap NSE: Oracle SID Brute

This script attempts to guess Oracle instance/SID names against the TNS-listener. This is a wrapper on the Nmap Security Scanner's http://nmap.org oracle-sid-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaporaclesidbrute.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap Oracle SID Brute N...

Nmap NSE: SMB psexec

This script attempts to implement remote process execution, allowing a user to run a series of programs on a remote machine and read the output. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-psexec.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbpsexec.nasl 7006 2017-08-25...

Nmap NSE: Citrix Enum Servers

This script attempts to extract a list of Citrix servers from the ICA Browser service. This is a wrapper on the Nmap Security Scanner's http://nmap.org citrix-enum-servers.nse. OpenVAS Vulnerability Test $Id: gbnmapcitrixenumservers.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Citrix...

Nmap NSE: SNMP Brute

This script attempts to find an SNMP community string by brute force guessing. This is a wrapper on the Nmap Security Scanner's http://nmap.org snmp-brute.nse. OpenVAS Vulnerability Test $Id: gbnmapsnmpbrute.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap SNMP Brute NSE script. Authors:...

Nmap NSE: SMTP Strange Port

This script attempts to check if SMTP is running on a non-standard port. This is a wrapper on the Nmap Security Scanner's http://nmap.org smtp-strangeport.nse. OpenVAS Vulnerability Test $Id: gbnmapsmtpstrangeport.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap SMTP Strange Port NSE...

Nmap NSE: MS SQL Info

This script attempts to extract information from Microsoft SQL Server instances. This is a wrapper on the Nmap Security Scanner's http://nmap.org ms-sql-info.nse. OpenVAS Vulnerability Test $Id: gbnmapmssqlinfo.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap MS SQL Info NSE script...

Nmap NSE: X11 Access

This script attempts to check if you are allowed to connect to the X server. This is a wrapper on the Nmap Security Scanner's http://nmap.org x11-access.nse. OpenVAS Vulnerability Test $Id: gbnmapx11access.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap X11 Access NSE script. Authors:...

Nmap NSE: RealVNC Authentication Bypass

This script attempts to check if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. This is a wrapper on the Nmap Security Scanner's http://nmap.org realvnc-auth-bypass.nse. OpenVAS Vulnerability Test $Id: gbnmaprealvncauthbypass.nasl 7006 2017-08-25 11:51:20Z teissa $...

Nmap NSE: UPnP Info

This script attempts to extract system information from the UPnP service. This is a wrapper on the Nmap Security Scanner's http://nmap.org upnp-info.nse. OpenVAS Vulnerability Test $Id: gbnmapupnpinfo.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap UPnP Info NSE script. Authors:...