OpenCart 'index.php' Local File Include Vulnerability

OpenCart is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks. OpenCart 1.1.8 is...

SuSE Security Summary SUSE-SR:2009:008

The remote host is missing updates announced in advisory SUSE-SR:2009:008. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability

The host is running RhinoSoft Serv-U SFTP, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodrhinosoftserv-usftpdosvuln900113.nasl 5375 2017-02-20 16:39:23Z cfi $ Description: RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability Authors: Sharath S...

[SA17865] VisNetic Mail Server Multiple Webmail Vulnerabilities

TITLE: VisNetic Mail Server Multiple Webmail Vulnerabilities SECUNIA ADVISORY ID: SA17865 VERIFY ADVISORY: http://secunia.com/advisories/17865/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: VisNetic Mail Server 8.x...

EFTP installation directory disclosure

The remote FTP server can be used to determine the installation directory by sending a request on an unexisting file. An attacker may use this flaw to gain more knowledge about this host, such as its filesystem layout. OpenVAS Vulnerability Test $Id: eftprootdisclosure.nasl 8023 2017-12-07...

[SA17302] Symantec Discovery Database Accounts Null Password

TITLE: Symantec Discovery Database Accounts Null Password SECUNIA ADVISORY ID: SA17302 VERIFY ADVISORY: http://secunia.com/advisories/17302/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From local network SOFTWARE: Symantec Discovery 6.x...

[SA15073] Vacation Parent Frame Page Title Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Vacation Parent Frame Page Title Cross-Site Scripting...

phpbb2012.txt

-------------------------------------------------------------------- Written by [email protected] -------------------------------------------------------------------- -------------------------------------------------------------------- Exploit : 2.0.x = phpbb 2.0.12 :...

[SA14182] Frox Deny ACL Security Bypass Vulnerability

TITLE: Frox Deny ACL Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14182 VERIFY ADVISORY: http://secunia.com/advisories/14182/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Frox 0.x http://secunia.com/product/4619/ DESCRIPTION: A vulnerability has been...

[SA14057] UW-imapd CRAM-MD5 Authentication Bypass Vulnerability

TITLE: UW-imapd CRAM-MD5 Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA14057 VERIFY ADVISORY: http://secunia.com/advisories/14057/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: UW-imapd http://secunia.com/product/1578/ DESCRIPTION: A vulnerability...

[SA13964] Comersus Cart Multiple Vulnerabilities

TITLE: Comersus Cart Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13964 VERIFY ADVISORY: http://secunia.com/advisories/13964/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Comersus Cart 6.x...

RealPlayer ActiveX control contains buffer overflow in "ShowPreferences"

Overview The RealPlayer ActiveX control contains a stack-based buffer overflow in the ShowPreferences method. This may permit a remote attacker to execute arbitrary code on the user's system. Description RealNetworks RealPlayer is a multimedia application that allows users to view local and remot...

[SA13619] PsychoStats "login" Cross-Site Scripting Vulnerability

TITLE: PsychoStats "login" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13619 VERIFY ADVISORY: http://secunia.com/advisories/13619/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PsychoStats 2.x http://secunia.com/product/4450/ DESCRIPTION: James...

[SA13357] Serendipity "searchTerm" Cross-Site Scripting Vulnerability

TITLE: Serendipity "searchTerm" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13357 VERIFY ADVISORY: http://secunia.com/advisories/13357/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Serendipity 0.x http://secunia.com/product/3969/ DESCRIPTION:...

Debian DSA-601-1 : libgd - integer overflow

More potential integer overflows have been found in the GD graphics library which weren't covered by our security advisory DSA 589. They could be exploited by a specially crafted graphic and could lead to the execution of arbitrary code on the victim's machine. %NASLMINLEVEL 70300 C Tenable Netwo...

[SA13074] FsPHPGallery Denial of Service and Disclosure of System Information Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA12647] ColdFusion MX Sensitive Information Disclosure and Denial of Service

TITLE: ColdFusion MX Sensitive Information Disclosure and Denial of Service SECUNIA ADVISORY ID: SA12647 VERIFY ADVISORY: http://secunia.com/advisories/12647/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information, DoS WHERE: From remote SOFTWARE: Macromedia ColdFusion MX 6.x...

Mandrake Linux Security Advisory : zlib (MDKSA-2004:090)

Due to a Debian bug report, a Denial of Service vulnerability was discovered in the zlib compression library versions 1.2.x, in the inflate and inflateBack functions. Older versions of zlib are not affected. Once the updated packages have been installed, all programs linked against zlib must be...

[SA12226] tnftpd Signal Handling Privilege Escalation Vulnerabilities

TITLE: tnftpd Signal Handling Privilege Escalation Vulnerabilities SECUNIA ADVISORY ID: SA12226 VERIFY ADVISORY: http://secunia.com/advisories/12226/ CRITICAL: Moderately critical IMPACT: System access, Privilege escalation WHERE: From remote SOFTWARE: tnftpd http://secunia.com/product/3800/...

Solaris 2.5.1 (sparc) : 104849-09

SunOS 5.5.1: /kernel/fs/cachefs patch. Date this patch was last updated by Sun : Apr/01/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...