Cisco ONS Detection

Based on the SNMP sysDesc value returned from the remote host, it is a Cisco Optical Networking System device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69058; scriptversion"1.4"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"Cisco ONS Detection";...

CVE-2013-2118

SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php...

favicon_identification

This plugin identifies software version using favicon.ico file. It checks MD5 of favicon against the MD5 database of favicons. See also: http://www.owasp.org/index.php/Category:OWASPFaviconDatabaseProject http://kost.com.hr/favicon.php Plugin type Infrastructure Options This plugin doesnt have an...

CVE-2013-1223

The log viewer in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted 1 HTTP or 2 HTTPS request, aka Bug ID CSCub38372...

CVE-2012-5216

Cross-site request forgery CSRF vulnerability on HP ProCurve 1700-8 aka J9079A switches with software before VA.02.09 and 1700-24 aka J9080A switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Debian Security Advisory DSA 2650-2 (libvirt - files and device nodes ownership change to kvm group)

Bastian Blank discovered that libvirtd, a daemon for management of virtual machines, network and storage, would change ownership of devices files so they would be owned by user libvirt-qemu and group kvm , which is a general purpose group not specific to libvirt, allowing unintended write access ...

mnoGoSearch <= 3.3.12 Multiple Vulnerabilities - Active Check

mnoGoSearch is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2645-1 (inetutils - denial of service)

Ovidiu Mara reported in 2010 a vulnerability in the ping util, commonly used by system and network administrators. By carefully crafting ICMP responses, an attacker could make the ping command hangs. OpenVAS Vulnerability Test $Id: deb2645.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated...

CVE-2013-0637

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before...

AdaptCMS 2.0.4 - config.php?question SQL Injection

AdaptCMS 2.0.4 - config.php?question SQL Injection Exploit Title: AdaptCMS = 2.0.4 SQL Injection vulnerability Date: 26/10/2012 Exploit Author: Kallimero Vendor Homepage: http://www.adaptcms.com/ Software Link: http://www.insanevisions.com/page/3/Downloads/ Version: 2.0.4 Tested on: Debian...

ASMAX AR 1004g Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: ASMAX AR 1004g Authentication Bypass Date: 30.01.2013 Exploit Author: lucyoa Vendor Homepage: asmax.pl ASMAX AR 1004g is the most popular router device from asmax. ------------------- Device Info --------------------------...

ZTE ZXV10 W300 series (Djaweb router) vulnerability

Exploit for hardware platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

CVE-2012-6057

The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...

Code injection

The DHCP server on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 before 7.25.8, 7.1 before 7.25.8, 7.2 before 7.25.8, 8.0 before 8.05.28, 8.1 before 8.12.56, 8.2 before 8.25.27, 8.3 before...

NTP Clock Variables Disclosure

This module reads the system internal NTP variables. These variables contain potentially sensitive information, such as the NTP software version, operating system version, peers, and more. This module requires Metasploit: https://metasploit.com/download Current source:...

SafeNet Sentinel Keys Server - Crash (PoC)

SafeNet Sentinel Keys Server - Crash PoC Exploit Title: SafeNet Sentinel Keys Server DoS Date: 10 Sep 2012 Exploit Author: retset https://twitter.com/ret5et Vendor Homepage: http://www.safenet-inc.com/ Version: Sentinel Protection Installer v7.6.5 sntlkeyssrvr.exe ver. 1.3.1.3 Download link:...

Zenoss 3 showDaemonXMLConfig Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Zenoss 3...

Discuz! 7.00 + 7.1 + 7.2 database exploit

Exploit for php platform in category web applications Exploit Title: Discuz! 7.00 + 7.1 + 7.2 database exploit Author: Over-X email: email protected Vendor or Software Link: http://download.comsenz.com/Discuz/7.0.0/Discuz7.0.0FULLSCGBK.zip Version: 7.00 & 7.1 & 7.2 Google dork: "powered by Discuz...

Lynx Message Server - Multiple Vulnerabilities

Lynx Message Server - Multiple Vulnerabilities 1. Summary The Micro Technology Services Inc. "Lynx Message Server 7.11.10.2" and/or "LynxTCPService version 1.1.62" web interface is vulnerable to SQL Injection, Cross-Site Scripting, and other security problems. 2. Description Lynx is a "Facility...

AnvSoft Any Video Converter 4.3.6 Buffer Overflow

Title: ====== AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=492 VL-ID: ===== 492 Introduction: ============= An all-in-one user-friendly DVD ripper, Video Record, video...