Fedora Update for galeon FEDORA-2010-1936

Check for the Version of galeon OpenVAS Vulnerability Test Fedora Update for galeon FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

ZDI-10-018: IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability

ZDI-10-018: IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-018 February 18, 2010 -- Affected Vendors: IBM -- Affected Products: IBM Cognos -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been...

[SECURITY] Fedora 11 Update: galeon-2.0.7-20.fc11

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

FlexCMS Insecure Cookie Handling

============================================================================== » FlexCMS Insecure Cookie Handling Vulnerability ============================================================================== » Script: FlexCMS v3.1 » Language: PHP » Site page: FlexCMS is a joint venture of DCSun...

RealAdmin suffers from a remote blind SQL injection vulnerability

No description provided by source. .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : RealAdmin .:. Download Script: http://www.redcow.ca/products/realadmin/ .:. Bug Type : Blind Sql Injection .:. Dork : "Powered by RealAdmin and Red...

[CORE-2009-1126] Corel Paint Shop Pro Photo X2 FPX Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Corel Paint Shop Pro Photo X2 FPX Heap Overflow 1. Advisory Information Title: Corel Paint Shop Pro Photo X2 FPX Heap Overflow Advisory Id: CORE-2009-1126 Advisory UR...

CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities 1. Advisory Information Title: Internet Explorer Dynamic OBJECT tag and URLMON sniffing...

cityadmin (links.php) Blind Sql Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= cityadmin links.php Blind Sql Injection Vulnerability ======================================================= .:. Script : cityadmin .:. Download Script:...

myBusinessAdmin (content.php) Blind Sql Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== myBusinessAdmin content.php Blind Sql Injection Vulnerability =============================================================== .:. Script : myBusinessAdmin .:. Download Script:...

Cisco Secure Desktop Remote Cross-Site Scripting Vulnerability

Cisco Secure Desktop contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to a lack of input sanitation in the Cisco Secure Desktop. An unauthenticated, remote attacker could exploit this vulnerability by...

WebDrive缺少安全描述符本地权限提升漏洞

BUGTRAQ ID: 37955 CVE ID: CVE-2009-4606 WebDrive是Windows化的文件传输软件，可将FTP服务器设置为硬盘盘符。 WebDrive所安装的WebDrive服务没有设置安全描述符，本地用户可以通过stop命令终止服务、使用config命令修改binPath变量并执行任意命令，或通过start命令重启服务。 South River Technologies WebDrive 9.02 厂商补丁： South River Technologies ------------------------...

South River Technologies WebDrive Local Privilege Escalation Vulnerability

South River Technologies WebDrive is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

South River WebDrive Version Detection

This script detects the installed South River WebDrive. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

CVE-2010-0391

Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Stack overflow

Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2010-0391

Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

South River Technologies WebDrive Service 9.02 build 2232 - Bad Security Descriptor Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

South River Technologies WebDrive Service Bad Security Descriptor Local

Exploit for unknown platform in category local exploits ============================================================================================ South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation...

CVE-2009-4606

South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart the...