Sql injection

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor NPM before 11.5, NetFlow Traffic Analyzer NTA before 4.1, Network Configuration Manager NCM before 7.3.2, IP...

CVE-2014-9566

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor NPM before 11.5, NetFlow Traffic Analyzer NTA before 4.1, Network Configuration Manager NCM before 7.3.2, IP...

SolarWinds Server & Application Monitor (SAM) Detection (HTTP)

HTTP based detection of SolarWinds Server & Application Monitor SAM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Grinder - System to Automate the Fuzzing of Web Browsers

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes. Grinder Nodes provide an automated way to fuzz a browser, and generate useful crash information such as call stacks with symbol information as well as logging information which can be used...

KarjaSoft Sami HTTP Server 1.0.4/1.0.5/2.0.1 Request Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22159/info Sami HTTP Server is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the server application, denying further service to legitimate users. import socket...

IBM Network Station Manager 2.0 R1 Race Condition Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/900/info IBM's Network Station Manager is a client/server application which facilitates management for IBM Network Stations. It is possible to locally gain root priviliges on hosts running the NetStation daemon. NetStatio...

OpenSSL TLS Record Tampering Denial of Service (CVE-2013-4353)

A denial of service vulnerability exists in OpenSSL. The vulnerability is due to an error in handling certain TLS records during the handshake process. A remote unauthenticated attacker could exploit this vulnerability by sending tampered records to a vulnerable SSL client which could be a server...

XStream: remote code execution due to insecure XML deserialization

It was found that XStream could deserialize arbitrary user-supplied XML content, representing objects of any type. A remote attacker able to pass XML to XStream could use this flaw to perform a variety of attacks, including remote code execution in the context of the server running the XStream...

PT-2013-3924

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway version 2.3.9.27 Description A use-after-free issue in the server application allows remote attackers to cause a denial of service, potentially leading to a daemon crash, or possibly execute arbitrary code. The exact vectors...

Scientific Linux Security Update : pam_krb5/krb5 on SL5.x i386/x86_64

pamkrb5 address the following security issue : A flaw was found in the pamkrb5 'existingticket' configuration option. If a system is configured to use an existing credential cache via the 'existingticket' option, it may be possible for a local user to gain elevated privileges by using a different...

SmarterMail 7.x LDAP Injection

Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Tested on : SmarterMail 7.x 7.2.3925 //...

SmarterMail 7.2.3925 - Persistent Cross-Site Scripting

SmarterMail 7.2.3925 - Persistent Cross-Site Scripting Source URL http://cloudscan.blogspot.com/2010/10/vendor-smartertoolscom-smartermail-7x.html Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home :...

Debian DSA-2052-1 : krb5 - NULL pointer dereference

Shawn Emery discovered that in MIT Kerberos 5 krb5, a system for authenticating users and services on a network, a NULL pointer dereference flaw in the Generic Security Service Application Program Interface GSS-API library could allow an authenticated remote attacker to crash any server applicati...

Mozilla Network Security Services SSLv2 Server Stack Overflow (CVE-2007-0009)

Mozilla Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. NSS provides a support for Secure Sockets Layer SSL, Secure / Multipurpose Internet Mail Extensions S/MIME and other security standards...

OCSinventory-ng 1.x SQL Injection / Cross Site Scripting

OCSinventory-ng Multiple remote vulnerabalities as ben descovered in OCS Inventory NG Management server, sql inyeccion and xss This vulneravility afect version 1.x Name OCS Inventory vendor http://www.ocsinventory-ng.org/ Download http://www.ocsinventory-ng.org/index.php?page=1-02-1 Category web...

Home FTP Server 1.10.1.139 - SITE INDEX Remote Denial of Service

Home FTP Server 1.10.1.139 - SITE INDEX Remote Denial of Service Exploit Title: Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service Vulnerability Date: 16 Nov 09 Author: zhangmc Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Version: Home FTP...

IBM DB2 DoS

Few security vulnerabilities causing server application to crash...

FreeBSD Security Advisory (FreeBSD-SA-08:03.sendfile.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:03.sendfile.asc ADV FreeBSD-SA-08:03.sendfile.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

Feng 0.1.15 - Multiple Remote Buffer Overflow Denial of Service Vulnerabilities

Feng 0.1.15 - Multiple Remote Buffer Overflow Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/27049/info Feng is prone to multiple remote buffer-overflow and denial-of-service vulnerabilities. Successfully exploiting these issues allows remote attackers to execute...

Feng 0.1.15 - Multiple Remote Buffer Overflow / Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/27049/info Feng is prone to multiple remote buffer-overflow and denial-of-service vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the server application. Attackers may also crash th...