Oracle Database Server Multiple Unspecified Vulnerabilities -07 (Jan 2016)

Oracle Database Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ACC IMoveis 4.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title : iMoveis SQL Injection Vulnerability Date : 26/10/2010 Author : EraGoN Software link : http://baixar7.com/download/acc-imoveis-script-php.rar/3d1e7bf4b9 Version : 1.1 Tested on : Linux / Windows XP Dork : inurl:imoveis.php?id= Error You have an...

Simple Web Server Connection Header Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

OkCupid: Server leaks version number

Severity: Low Summary: The Web Server's banner contains the version number of the server - OKWS/3.1.19.0. The version number found is 3.1.19.0 at okcupid.com/ HTTP/1.1...

DNS Server Version Detection

Nessus was able to obtain version information by sending a special TXT record query to the remote host. Note that this version is not necessarily accurate and could even be forged, as some DNS servers send the information based on a configuration file. C Tenable Network Security, Inc...

mysql: command-line tool buffer overflow via long server version string

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service crash and possibly execute arbitrary code via a long server version string...

mysql: command-line tool buffer overflow via long server version string

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service crash and possibly execute arbitrary code via a long server version string...

mysql: command-line tool buffer overflow via long server version string

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service crash and possibly execute arbitrary code via a long server version string...

mysql: command-line tool buffer overflow via long server version string

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service crash and possibly execute arbitrary code via a long server version string...

AuraCMS多个SQL注入漏洞

CVE ID：CVE-2014-1401 auraCMS是一款基于PHP的WEB应用程序。 AuraCMS存在SQL注入漏洞。由于在程序SQL查询使用之前未能充分过滤未明的输入，允许远程攻击者在后端数据库中注入或操纵SQL查询，允许任意数据的操纵或披露。 0 Auracms 2.3 厂商补丁： Auracms ----- 1月30日后更新的Auracms 2.3版本以修复此漏洞，建议用户下载使用： http://auracms.org 1.The exploitation example below displays version of MySQL server:...

CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service crash and possibly execute arbitrary code via a long server version string...

SQL Injection in AdRotate

High-Tech Bridge Security Research Lab discovered vulnerability in AdRotate, which can be exploited to perform SQL Injection attacks. 1 SQL Injection in AdRotate: CVE-2014-1854 The vulnerability exists due to insufficient validation of "track" HTTP GET parameter passed to...

Horizon QCMS "/download.php" SQL注入漏洞

CVE ID:CVE-2013-7139 Horizon QCMS是支持PHP与MySQL的开放源码的Horizon快速内容管理系统。 该漏洞的存在是由于传递到"/download.php"脚本的"category" HTTP POST参数未被正确过滤，未经身份验证的远程攻击者可以在应用数据库中执行任意SQL命令。 0 Horizon QCMS=4.0 厂商补丁： Horizon ----- Horizon 4.0版本以修复此漏洞，建议用户下载使用： http://sourceforge.net/projects/hnqcms/files/patches/ The exploitatio...

Telnet-Ftp Server Directory Traversal Vulnerability

The host is running Telnet-Ftp server and is prone to directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbtelnetftpserverdirtravvun.nasl 6086 2017-05-09 09:03:30Z teissa $ Telnet-Ftp Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2013...

hmap

This plugin fingerprints the remote web server and tries to determine the server type, version and patch level. It uses fingerprinting, not just the Server header returned by remote server. This plugin is a wrapper for Dustin Lees hmap. One configurable parameters exist: genFpF If genFpF is set t...

Sysax Multi Server SSH Component NULL Pointer Dereference DOS Vulnerability

The host is running Sysax Multi Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbsysaxmultiserversshdosvuln.nasl 6074 2017-05-05 09:03:14Z teissa $ Sysax Multi Server SSH Component NULL Pointer Dereference DOS Vulnerability Authors: Antu Sanadi Copyright:...

Nmap NSE 6.01: pop3-capabilities

Retrieves POP3 email server capabilities. POP3 capabilities are defined in RFC 2449. The CAPA command allows a client to ask a server what commands it supports and possibly any site-specific policy. Besides the list of supported commands, the IMPLEMENTATION string giving the server version may be...

Netgear SPH200D Multiple Vulnerabilities

Exploit for hardware platform in category web applications Device Name: SPH200D Vendor: Netgear ============ Vulnerable Firmware Releases: ============ Firmware Version : 1.0.4.80 Kernel Version : 4.1-18 Web Server Version : 1.5 ============ Device Description: ============...

ventrilo-info NSE Script

Detects the Ventrilo voice communication server service versions 2.1.2 and above and tries to determine version and configuration information. Some of the older versions pre 3.0.0 may not have the UDP service that this probe relies on enabled by default. The Ventrilo server listens on a TCP...

Microsoft System Center Operations Manager Detection (Windows SMB Login)

Detects the installed version of Microsoft System Center Operations Manager. The script logs in via smb, searches for Microsoft System Center Operations Manager in the registry and gets the version from SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a...