CVE-2012-4326

Cross-site request forgery CSRF vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators...

CVE-2012-4326

The CVE-2012-4326 entry describes a CSRF vulnerability in AlstraSoft Site Uptime Enterprise, affecting commonsettings.php and potentially impacting version 5.4. The underlying issue allows remote attackers to hijack administrator sessions by exploiting cross-site requests. The linked documents co...

CVE-2012-4326: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators...

PT-2012-5328

Name of the Vulnerable Software and Affected Versions AlstraSoft Site Uptime Enterprise version 5.4 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators. This occurs due to a vulnerability in the commonsettings.php...

gkrellm-info NSE Script

Queries a GKRellM service for monitoring information. A single round of collection is made, showing a snapshot of information at the time of the request. Example Usage nmap -p 19150 --script gkrellm-info Script Output PORT STATE SERVICE 19150/tcp open gkrellm | gkrellm-info: | Hostname: ubu1110 |...

AlstraSoft Site Uptime Cross Site Request Forgery

Exploit Title: AlstraSoft Site Uptime CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/alstrasoft-site-uptime/19680/ Category:: webapps Demo : http://www.blizsoft.com/uptime/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com...

AlstraSoft Site Uptime CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: AlstraSoft Site Uptime CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/alstrasoft-site-uptime/19680/ Category:: webapps Demo : http://www.blizsoft.com/uptime/admin Greetz: Inj3ct0r Exploit...

Role of free Hosting in Cyber Crime

Role of free Hosting in Cyber Crime Zscaler experts notice that free hosting and DNS providers abused for hosting Phishing Pages, Spamming, Botnets or Malwares. Many free hosted sites considered as spam. They list "x90x.net" Free hosting Provider which used to host many Facebook Phishing sites...

membase-http-info NSE Script

Retrieves information hostname, OS, uptime, etc. from the CouchBase Web Administration port. The information retrieved by this script does not require any credentials. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size,...

Researcher Releases New Version of P0f Fingerprinting Tool

Security researcher Michal Zalewski has released a new version of a passive fingerprinting tool called P0f that has the ability to diagnose a wide range of components in an Internet connection, even uncovering clients that are trying to forge some part of their identity in the connection. P0f is ...

Mapping the Criminal-ISP Infrastructure

According to a report issued today, eight networks connect directly to the botnet-hosting ISP Troyak and four other upstream providers that “surround the malicious core,” and help to “mask the true malware-hosting armada and provide solid uptime to the malware servers” for ZeuS botnets, Gozi, and...

Solaris 8 (sparc) : 142294-01

SunOS 5.8: whodo w uptime patch. Date this patch was last updated by Sun : Oct/30/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 8 (x86) : 142295-01

SunOS 5.8x86: whodo w uptime patch. Date this patch was last updated by Sun : Oct/30/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

irc-info NSE Script

Gathers information from an IRC server. It uses STATS, LUSERS, and other queries to obtain this information. Example Usage nmap -sV -sC Script Output 6665/tcp open irc | irc-info: | server: asimov.freenode.net | version: ircd-seven-1.1.320111112-b71671d1e846,charybdis-3.4-dev. asimov.freenode.net...

TCP Timestamps Information Disclosure

The remote host implements TCP timestamps and therefore allows to compute the uptime. SPDX-FileCopyrightText: 2008 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

TCP/IP Timestamps Supported

The remote host implements TCP timestamps, as defined by RFC1323. A side effect of this feature is that the uptime of the remote host can sometimes be computed. TRUSTED...

CVE-2007-1103

CVE-2007-1103 affects Tor, where the client does not verify a node’s uptime and bandwidth advertisements. This allows a remote attacker operating a low-resource node to falsely claim greater resources, causing that node to be used in many circuits and potentially compromising the anonymity of tra...

CVE-2003-0882

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet...

CVE-2003-0882

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet...

CVE-2003-0882: Undefined Security Weakness

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet...