CentOS Update for NetworkManager CESA-2010:0616 centos5 i386

Check for the Version of NetworkManager OpenVAS Vulnerability Test CentOS Update for NetworkManager CESA-2010:0616 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

National Nuclear Lab IT Systems at Risk

Confidential Information about the nation’s nuclear stockpile could be at risk according to an audit of Lawrence Livermore National Laboratory issued by the Department of Energy DOE earlier this week. The audit .PDF found the government-funded Bay Area-lab failed to effectively implement its...

phpKF Forum 1.80 profil_degistir.php CSRF Exploit

Exploit for php platform in category web applications ================================================= phpKF Forum 1.80 profildegistir.php CSRF Exploit ================================================= Exploit Title : phpKF Forum profildegistir.php CSRF Exploit. Google Dork : php Kolay Forum php...

PT-2010-4824

Name of the Vulnerable Software and Affected Versions Redback versions prior to 1.2.4 Apache Archiva versions 1.0 through 1.0.3 Apache Archiva versions 1.1 through 1.1.4 Apache Archiva versions 1.2 through 1.2.2 Apache Archiva versions 1.3 through 1.3.1 Apache Continuum version 1.3.6 Apache...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in user/main/updateuser in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

RHEL 5 : sudo (RHSA-2010:0475)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2010:0475 advisory. The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the way sud...

Abyss Web Server X1 - Cross-Site Request Forgery

Abyss Web Server X1 - Cross-Site Request Forgery http://osvdb.org/show/osvdb/64693 http://cross-site-scripting.blogspot.com/2010/05/abyss-web-server-x1-xsrf.html : Abyss Web Server X1 XSRF A cross-site request forgery vunlerability in the Abyss Web Server X1 management console can be exploited to...

r57shell Backdoor Detection

At least one instance of r57shell is hosted on the remote web server. This is a PHP script that acts as a backdoor and provides a convenient set of tools for attacking the affected host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Facebook Cross-Site Request Forgery vulnerability

Exploit for unknown platform in category web applications ================================================= Facebook Cross-Site Request Forgery vulnerability ================================================= ============================================= INTERNET SECURITY AUDITORS ALERT 2010-002 -...

AccStatistics 1.1 Cross Site Request Forgery

------------------------------------------------------------------------------------------------- Title: AccStatistics v1.1 XSRF Vulnerability Change Admin Settings Author: Milos Zivanovic Date: 13. December 2009...

CVE-2009-3939

The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...

DreamPoll 3.1 Vulnerabilities

During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes...

DreamPoll 3.1 SQL Injection / XSS

During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes...

DreamPoll 3.1 Vulnerabilities

No description provided by source. During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a...

Gentoo Security Advisory GLSA 200501-22 (poppassd_pam)

The remote host is missing updates announced in advisory GLSA 200501-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Design/Logic Flaw

The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the 1 themes.dat, 2 languages.dat, 3 profession.dat, 4 gen.dat, 5 marstat.dat, 6 states.dat, and 7 ages.dat files before saving profile settings of members, which has unknown impact a...

CVE-2007-0697

index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html. NOTE: some of these details are obtained from third party information...

Code injection

JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...

CVE-2007-0131

JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...

CVE-2007-0131

JAMWiki is affected by CVE-2007-0131. The issue is that JAMWiki before 0.5.0 does not properly enforce permissions during moves of topics that are read-only or admin-only, allowing remote attackers to make unauthorized changes to the wiki. The vulnerability is rooted in insufficient permission ch...