1885 matches found
Nmap NSE net: ftp-anon
Checks if an FTP server allows anonymous logins. If anonymous is allowed, gets a directory listing of the root directory and highlights writeable files. SYNTAX: ftp-anon.maxlist: The maximum number of files to return in the directory listing. By default it is 20, or unlimited if verbosity is...
Nmap NSE net: jdwp-version
Detects the Java Debug Wire Protocol. This protocol is used by Java programs to be debugged via the network. It should not be open to the public Internet, as it does not provide any security against malicious attackers who can inject their own bytecode into the debugged process. Documentation for...
ldap-novell-getpass NSE Script
Universal Password enables advanced password policies, including extended characters in passwords, synchronization of passwords from eDirectory to other systems, and a single password for all access to eDirectory. In case the password policy permits administrators to retrieve user passwords "Allo...
Google Chrome < 11.0.696.71 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 11.0.696.71. Such versions of Chrome are affected by multiple vulnerabilities: - An unspecified error allows the pop-up blocker to be bypassed. Issue 72189 - A stale pointer can be left behind when floating point numbers ar...
TWiki 5.0.1 Cross Site Scripting
Information ----------------------------------- Name : XSS vulnerability in TWiki Software : TWiki 5.0.1 and possibily below. Vendor Hompeage : http://twiki.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-005 CVE : CVE-2011-1838...
HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities
HP SiteScope is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user- supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the contex...
Atlassian Confluence 2.x >= 2.7 / 3.x < 3.4.6 Multiple XSS
According to its self-reported version number, the instance of Atlassian Confluence on the remote host is a 2.x version that is 2.7 or later, or else version 3.x prior to 3.4.6. It is, therefore, affected by multiple, cross-site scripting vulnerabilities. Errors in the validation of input data to...
omp2-brute NSE Script
Performs brute force password auditing against the OpenVAS manager using OMPv2. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the creds library...
Redmine 1.1.1 Cross Site Scripting
Information -------------------- Name : XSS vulnerability in Redmine Software : all Redmine versions from 1.0.1 to 1.1.1 Vendor Homepage : http://www.redmine.org Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-004 Description...
Debian DSA-2206-1 : mahara - several vulnerabilities
Two security vulnerabilities have been discovered in Mahara, a fully featured electronic portfolio, weblog, resume builder and social networking system : - CVE-2011-0439 A security review commissioned by a Mahara user discovered that Mahara processes unsanitized input which can lead to cross-site...
Tracks 1.7.2 Cross Site Scripting
Information -------------------- Name : XSS vulnerability in Tracks Software : Tracks 1.7.2. Vendor Hompeage : http://getontracks.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-003 Description ------------------ Tracks is a...
Mozilla Thunderbird 3.1 < 3.1.9 Invalid HTTP Certificates
The installed version of Thunderbird 3.1 is earlier than 3.1.9. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affect...
[DSECRG-11-009] SAP NetWaver XI SOAP Adapter - XSS
DSECRG-11-009 SAP NetWaver XI SOAP Adapter - XSS SAP NetWeaver 7.0 application XI SOAP Adapter has linked XSS vulnerability Digital Security Research Group DSecRG Advisory DSecRG-11-009 Internal DSecRG-00120 Application: SAP NetWeaver Versions Affected: SAP NetWeaver XI SOAP Adapter 3.0-7.11 Vend...
[DSECRG-11-010] SAP NetWeaver logon.html - XSS
DSECRG-11-010 SAP NetWeaver logon.html - XSS SAP NetWeaver BSP logon page has linked XSS vulnerability. Digital Security Research Group DSecRG Advisory DSecRG-11-010 Internal DSecRG-00127 Application: SAP NetWeaver Versions Affected: SAP NetWeaver SAPBASIS 620-730 Vendor URL: http://www.sap.com...
IBM Lotus Sametime Server stconf.nsf messageString Parameter XSS
The version of Lotus Sametime on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'messageString' parameter of the 'stconf.nsf' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a...
Safari < 5.0.4 Multiple Vulnerabilities
Binary data 801013.prm...
Majordomo2 _list_file_get() Directory Traversal
This module exploits a directory traversal vulnerability present in the listfileget function of Majordomo2 help function. By default, this module will attempt to download the Majordomo config.pl file. Module Options msf use auxiliary/scanner/http/majordomo2/directorytraversal msf...
Debian DSA-2180-1 : iceape - several vulnerabilities
Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsing of...
Debian DSA-2166-1 : chromium-browser - several vulnerabilities
Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0777 Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly ha...