Ubuntu: Security Advisory (USN-869-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-871-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

osDate (uploadvideos.php) Shell Upload Vulnerability

No description provided by source. ==================================================== osDate Upload Shell Vulnerability uploadvideos.php ==================================================== Date : 05/08/2010 Author : Xa7m3d Tested ON : ubuntu 9.10 MY Team : Currently no Software Link :...

The Uploader 2.0.4 - Remote File Disclosure Vulnerability

No description provided by source. ================================================= The Uploader 2.0.4 Remote File disclosure Vulnerability ================================================= ============================================== Script Name : The Uploader Version : 2.0.4 Language : php...

LionWiki 3.x - (index.php) Shell Upload Vulnerability

No description provided by source. Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author: ayastar Software Link: http://lionwiki.0o.cz Version: 3.X Tested on: ubuntu 9.10 english CVE : yes Code : exploit code hi brother's and all muslims this is my first bug : dork ...

Mozilla Firefox <= 3.6 - Denial of Service Exploit

No description provided by source. ?php / Title: Mozilla Firefox =3.6 - Remote Denial Of Service Exploit Date: 25/02/10 Author: Ale46 - ale46atparanoicidotorg Software Link: http://www.mozilla-europe.org/en/firefox/ Version: 3.6 and 3.5.8 are vulnerable so I think that all versions = 3.6 have the...

Kayako eSupport 3.04.10 - XSS/CSRF Vulnerabilities

No description provided by source. + Exploit Title : kayako xss/xsrf Remote Vulnerabilities + Author : By D3V!L FUCKER + Script Link : http://www.kayako.com/solutions/esupport/ + Version : Kayako eSupport v3.04.10 + Tested on : linux ubuntu 9.10 + Code : +++++++++++++++++++++++++...

Hexjector <= 1.0.7.2 - Persistent XSS

No description provided by source. Exploit Title: Hexjector Persistent XSS =v1.0.7.2 Date: 25/5/2010 Author: Hexon Software Link: https://sourceforge.net/projects/hexjector/files/HexjectorWin32/Hexjector v1.0.7.2.zip/download Version: v1.0.7.2 and below Tested on: Windows XP SP2, Windows 7,Ubuntu...

Tiki Wiki <= 8.3 unserialize() PHP Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Ubuntu 9.04 / 9.10 / 10.04 LTS : opie vulnerability (USN-955-1)

Maksymilian Arciemowicz and Adam Zabrocki discovered that OPIE incorrectly handled long usernames. A remote attacker could exploit this with a crafted username and make applications linked against libopie crash, leading to a denial of service. Note that Tenable Network Security has extracted the...

Ubuntu 9.10 : grub2 vulnerability (USN-868-1)

It was discovered that GRUB 2 did not properly validate passwords. An attacker with physical access could conduct a brute-force attack and bypass authentication by submitting a 1 character password. Note that Tenable Network Security has extracted the preceding description block directly from the...

Ubuntu 9.10 : krb5 vulnerabilities (USN-916-1)

Emmanuel Bouillon discovered that Kerberos did not correctly handle certain message types. An unauthenticated remote attacker could send specially crafted traffic to cause the KDC to crash, leading to a denial of service. CVE-2010-0283 Nalin Dahyabhai, Jan iankko Lieskovsky, and Zbysek Mraz...

Immunity Canvas: FS_PIPE_RACE_TO_NULL

Name| fspiperacetonull ---|--- CVE| CVE-2009-3547 Exploit Pack| CANVAS Description| fspiperacetonull local root Notes| Repeatability: Infinite NOTES: Tested on Ubuntu 9.04 32-bit, Ubuntu 9.10 32-bit, kernels 2.6.28|29|30|31 Vulnerable kernels = 2.6.31 32bit. VENDOR: Linux CVE Url:...

Tiki Wiki unserialize() PHP Code Execution

This module exploits a php unserialize vulnerability in Tiki Wiki 'Tiki Wiki unserialize PHP Code Execution', 'Description' = %q This module exploits a php unserialize vulnerability in Tiki Wiki = 8.3 which could be abused to allow unauthenticated users to...

Ubuntu 9.10 / 10.04 LTS / 10.10 : dhcp3 vulnerability (USN-1108-2)

USN-1108-1 fixed vulnerabilities in DHCP. Due to an error, the patch to fix the vulnerability was not properly applied on Ubuntu 9.10 and higher. This update fixes the problem. Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses. An attacker could use thi...

Ubuntu 9.10 / 10.04 LTS / 10.10 : rsync vulnerability (USN-1124-1)

It was discovered that rsync incorrectly handled memory when certain recursion, deletion and ownership options were used. If a user were tricked into connecting to a malicious server, a remote attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 / 11.04 : php5 regressions (USN-1126-2)

USN 1126-1 fixed several vulnerabilities in PHP. The fix for CVE-2010-4697 introduced an incorrect reference counting regression in the Zend engine that caused the PHP interpreter to segfault. This regression affects Ubuntu 6.06 LTS and Ubuntu 8.04 LTS. The fixes for CVE-2011-1072 and CVE-2011-11...

Ubuntu 9.10 : Multiple Xulrunner 1.9.1 vulnerabilities (USN-1123-1)

A large number of security issues were discovered in the Gecko rendering engine. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

Ubuntu Update for kde4libs USN-1110-1

Ubuntu Update for Linux kernel vulnerabilities USN-1110-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11101.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for kde4libs USN-1110-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu Update for kdenetwork USN-1114-1

Ubuntu Update for Linux kernel vulnerabilities USN-1114-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11141.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for kdenetwork USN-1114-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...