1885 matches found
Nmap NSE: Banner Grabber
This script attempts to connect to the target port and returns the banner of the remote service. This is a wrapper on the Nmap Security Scanner's http://nmap.org banner.nse OpenVAS Vulnerability Test $Id: gbnmapbannergrabber.nasl 8233 2017-12-22 09:37:31Z cfischer $ Wrapper for Nmap Banner Grabbe...
FreeBSD : Piwik -- Local File Inclusion Vulnerability (26e1c48a-9fa7-11df-81b5-00e0814cab4e)
Piwik versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern infinite a crafted request for a data renderer. A vulnerability has been reported in Piwik, which can before exploited by malicious people to disclose potentially sensitive...
Debian DSA-2079-1 : mapserver - several vulnerabilities
Several vulnerabilities have been discovered in mapserver, a CGI-based web framework to publish spatial data and interactive mapping applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2539 A stack-based buffer overflow in the msTmpFile...
MDVA-2009:186 : firefox
This is a maintenance and bugfix update for firefox 3.5.x: Bug 468562 - ASSERTION: Inserting multiple children without flushing Bug 521750 - Put a runtime NSIsMainThread check in nsCycleCollector::Suspect2 and Forget2 Bug 525326 - Crashes in gif decoder @ xul.dll@0x348945@...
Mandriva Linux Security Advisory : kernel (MDVSA-2009:119)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The exitnotify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAPKILL capability is held, which allows local users to send an arbitrary signal to a process by...
Fedora 12 : kernel-2.6.32.16-141.fc12 (2010-10880)
Update to kernel 2.6.32.16: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.16 Additional fixes without associated bug numbers: Fix overscheduling bug causing performance loss on large machines. Add support for sky2 network adapters with Optima chips. Make hdpvr infrared controller...
Mozilla Firefox 3.6.x < 3.6.4 Multiple Vulnerabilities
Binary data 5580.prm...
Atlassian JIRA < 4.1.2 Multiple Vulnerabilities
Binary data 5577.prm...
VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)
VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability CVE-2010-1392 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with...
Ubuntu 6.06 LTS : gnutls12 vulnerability (USN-948-1)
It was discovered that GnuTLS did not always properly verify the hash algorithm of X.509 certificates. If an application linked against GnuTLS processed a crafted certificate, an attacker could make GnuTLS dereference a NULL pointer and cause a DoS via application crash. Note that Tenable Network...
eFront Multiple Parameter Cross Site Scripting Vulnerabilities
eFront Multiple Parameter Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "eFront is a fully flexible eLearning system capable of fulfilling a wide range of learning needs. With eFront you will discover new ways to perform training tasks easier and faster, while keeping...
openSUSE Security Update : xen-201004 (openSUSE-SU-2010:0293-1)
Collective Xen 2010/04 Update, containing fixes for the following issues : bnc576832 - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under...
PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities
PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "PHP-Calendar is a simple web calendar. It is targeted towards groups that need to collaboratively create and track events. In that same collaborative spirit, the source for...
phpGroupWare <= 0.9.16.015 SQL Injection Vulnerability
Exploit for php platform in category web applications ====================================================== phpGroupWare = 0.9.16.015 SQL Injection Vulnerability ====================================================== I. BACKGROUND --------------------- "phpGroupWare is a fully featured, web base...
phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404)
I. BACKGROUND --------------------- "phpGroupWare is a fully featured, web based messaging, collaboration and enterprise management platform. phpGroupWare comes with over 50 applications that can be mixed and matched according to your needs. Around the world tens of thousands of people use...
Mini Web Server Cross Site Scripting and Directory Traversal Vulnerabilities
Mini Web Server is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the...
MyBB < 1.4.12 Multiple Vulnerabilities
Binary data 5513.prm...
FreeBSD : dojo -- XSS and other vulnerabilities (805603a1-3e7a-11df-a5a1-0050568452ac)
The Dojo Toolkit team reports : Some PHP files did not properly escape input. Some files could operate like 'open redirects'. A bad actor could form an URL that looks like it came from a trusted site, but the user would be redirected or load content from the bad actor's site. A file exposed a mor...
wapiti (NASL wrapper)
This VT is deprecated. Copyright C 2010 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it unde...
Google Releases Skipfish Application Security Scanner
Google has released its own Web application security scanner, called Skipfish. The free scanner is designed to work within a variety of existing Web application frameworks and is built with an emphasis on speed and low false-positives, the company said. Skipfish enters a crowded field of Web...