Mandriva Update for rsnapshot MDVA-2010:088 (rsnapshot)

Check for the Version of rsnapshot OpenVAS Vulnerability Test Mandriva Update for rsnapshot MDVA-2010:088 rsnapshot Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

ldap-rootdse NSE Script

Retrieves the LDAP root DSA-specific Entry DSE Example Usage nmap -p 389 --script ldap-rootdse Script Output PORT STATE SERVICE 389/tcp open ldap | ldap-rootdse: | currentTime: 20100112092616.0Z | subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=cqure,DC=net | dsServiceName: CN=NTDS...

Microsoft Hyper-V本地拒绝服务漏洞（MS10-010）

BUGTRAQ ID: 38113 CVE ID: CVE-2010-0026 Hyper-V是基于虚拟机监控程序的技术，提供可扩展、可靠和高度可用的虚拟化平台。 Windows Server 2008和Server 2008 R2上的Hyper-V没有充分的验证特定序列的机器指令，guest机器上的本地用户可以导致Hyper-V服务器变得没有响应。 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 厂商补丁： Microsoft -------...

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1999-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at amizade.aeiou.pt

Security researcher Juza, has submitted on 13/02/2010 a cross-site-scripting XSS vulnerability affecting amizade.aeiou.pt, which at the time of submission ranked 6570 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently...

Unfixed XSS vulnerability at www.heritage.com

Security researcher bho, has submitted on 02/08/2010 a cross-site-scripting XSS vulnerability affecting www.heritage.com, which at the time of submission ranked 256419 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is currently...

Deepburner Pro version 1.9.0.228 dbr file universal buffer overflow exploit

No description provided by source. / Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from:...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...

Microsoft Internet Explorer Table Layout Col Tag Cache Update Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists when a Col element is used within an...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

gAlan 0.2.1 - Local Buffer Overflow (1)

gAlan 0.2.1 - Local Buffer Overflow 1 !/usr/bin/perl kpasa.pl AKA gAlan Buffer Overflow 0day Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 "From Static Analysis to 0day Exploit" Originally a SecurityTubeCon Presentation, which I'm guessing was cancel...

CVE-2009-3304

GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorizedkeys files in users' home directories, related to deb-specific/sshdumpupdate.pl and cronjobs/cvs-cron/sshcreate.php...

Unfixed XSS vulnerability at www.fcs.uga.edu

Security researcher Rohit Bansal, has submitted on 12/02/2009 a cross-site-scripting XSS vulnerability affecting www.fcs.uga.edu, which at the time of submission ranked 8879 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

CVE-2009-2626

The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare a variable, then using the inirestore function to restore the...

CVE-2009-2626

The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare a variable, then using the inirestore function to restore the...

[SECURITY] [DSA-1940-1] New php5 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1940-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 25, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.melbournecup.com

Security researcher Tipidy, has submitted on 23/11/2009 a cross-site-scripting XSS vulnerability affecting www.melbournecup.com, which at the time of submission ranked 172255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

google hacking advanced applications-vulnerability warning-the black bar safety net

Commonly used google keyword: foo1 foo2 which is associated, such as search xx company xx beauty operator:foo filetype:1 2 3 Type site:foo.com relatively straightforward to see the website more interesting, you can get many unexpected information intext:foo intitle: fooltitle title Oh allinurl:fo...

CVE-2009-3933

WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service CPU consumption via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions...

[SECURITY] [DSA 1928-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1928-1 [email protected] http://www.debian.org/security/ Dann Frazier November 5, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...