PACTware Denial of Service Vulnerability

PACTware is a suite of stand-alone fieldbus software for operating field instruments from the German PACTware software consortium. A security vulnerability exists in PACTware version 4.1 SP3. A remote attacker could exploit this vulnerability with the help of specially crafted files to cause a...

[RT-SA-2014-016] Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite

Advisory: Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal vulnerability in hybris Commerce software suite. This vulnerability allows attackers to download arbitrary files of any size...

Hybris Commerce Software Suite 5.x File Disclosure / Traversal Vulnerabilities

Various Hybris Commerce Software Suite 5.x suffer from a directory traversal vulnerability that allows for arbitrary file disclosure. Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal...

Hybris Commerce Software Suite 5.x File Disclosure / Traversal

Advisory: Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite During a penetration test, RedTeam Pentesting discovered a Directory Traversal vulnerability in hybris Commerce software suite. This vulnerability allows attackers to download arbitrary files of any size...

Centreon Enterprise Server 2.3.3-2.3.9-4 - Blind SQL Injection Exploit

No description provided by source. !/usr/bin/env python Exploit Title: Centreon 2.3.3 - 2.3.9-4 menuXML.php Blind SQL Injection Exploit Disclosure Date: December 12, 2012 Author: modpr0be @modpr0be Platform: Linux Tested on: Centreon Enterprise Server with Centreon 2.3.9-4 on CentOS 5.5 x8664 Fin...

SAMBA 2.0.7 SWAT Symlink Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...

SAMBA 2.0.7 SWAT Symlink Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...

Zamfoo 12.6 Arbitrary Command Execution

Title: Zamfoo Multiple Arbitrary Command Executions Author: Al-Shabaab Vendor Homepage:http://www.zamfoo.com/ Version: 12.6 Intro The ZamFoo software suite is a series of WHM plugin modules also known as WHM addon modules catered towards easing the burden of web hosting providers that sell shared...

LibreOffice OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 LibreOffice是一套可与其他主要办公室软体相容的套件，可在各种平台上执行。 LibreOffice所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 LibreOffice 4.x LibreOffice 4.2.3版本已修复该漏洞，建议用户下载使用： http://www.libreoffice.org/...

Debian Security Advisory DSA 2427-1 (imagemagick - several vulnerabilities)

Two security vulnerabilities related to EXIF processing were discovered in ImageMagick, a suite of programs to manipulate images. CVE-2012-0247When parsing a maliciously crafted image with incorrect offset and count in the ResolutionUnit tag in EXIF IFD0, ImageMagick writes two bytes to an invali...

Debian Security Advisory DSA 2462-2 (imagemagick - several vulnerabilities)

Several integer overflows and missing input validations were discovered in the ImageMagick image manipulation suite, resulting in the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb24622.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory D...

Novell ZENworks Detection

Novell ZENworks is a suite of software that is used for managing devices throughout their life cycle. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58445; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Evernote Detection (Windows)

Evernote is installed on this host. It is a cloud-based suite of software for note taking and archiving. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58290; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31";...

LibreOffice Detection

LibreOffice is installed on the remote Windows host. LibreOffice is a free software office suite developed as a fork of OpenOffice.org. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55573; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2010-3125

Untrusted search path vulnerability in TeamMate Audit Management Software Suite 8.0 patch 2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .tmx file...

Design/Logic Flaw

Untrusted search path vulnerability in TeamMate Audit Management Software Suite 8.0 patch 2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .tmx file...

TeamMate Audit Management Software Suite - 'mfc71enu.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: TeamMate Audit Management Software Suite DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , TeamMate Audi...

DSA-1879-1 silc-client silc-toolkit - arbitrary code execution

Bulletin has no description...

Autodesk LiveUpdate ActiveX control ApplyPatch method vulnerability

Added: 10/06/2008 CVE: CVE-2008-4472 BID: 31490 OSVDB: 49047 Background Autodesk is a suite of architectural design software products. Problem The ApplyPatch method in the LiveUpdate ActiveX control allows a web page to execute arbitrary files on the system. Remote command execution is possible b...

Quagga Routing Suite拒绝服务漏洞

Quagga Routing Suite是一款路由软件。 Quagga Routing Suite存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 如果debug bgp更新设置，存在NULL指针引用可导致bgpd崩溃。 如果community长度为0，没有设置community-present属性位，可导致返回时应用程序崩溃。 由于在引用之前检查com指针，可导致应用程序崩溃。 Quagga Quagga Routing Software Suite 0.99.8 Quagga Quagga Routing Software Suite 0.99.7 Quagga...