Microsoft Windows Shell Remote Code Execution Vulnerability (2691442)

This host is missing an important security update according to Microsoft Bulletin MS12-048. OpenVAS Vulnerability Test $Id: secpodms12-048.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Shell Remote Code Execution Vulnerability 2691442 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod...

Microsoft Windows File/Directory Names Handling Arbitrary Command Injection Vulnerability

Description Microsoft Windows is prone to a remote command-injection that affects the Windows Shell component vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary shell commands with user-level privileges. This may...

USN-1394-1: linux-ti-omap4 vulnerabilities

Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. CVE-2011-1927 Vegard Nossum discovered a leak in the kernel's inotifyinit system call. A local, unprivileged user could exploit...

CygniCon CyViewer - ActiveX Control 'SaveData()' Insecure Method

source: https://www.securityfocus.com/bid/48483/info CygniCon CyViewer ActiveX control is prone to a vulnerability caused by an insecure method. Successfully exploiting this issue will allow attackers to create or overwrite files within the context of the affected application typically Internet...

LeadTools Imaging LEADSmtp - ActiveX Control SaveMessage() Insecure Method

LeadTools Imaging LEADSmtp - ActiveX Control SaveMessage Insecure Method source: https://www.securityfocus.com/bid/48408/info LEADTOOLS Imaging LEADSmtp ActiveX control is prone to a vulnerability caused by an insecure method. Successfully exploiting this issue will allow attackers to create or...

SmarterMail 7.1.3876 Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ====================================================== SmarterMail 7.1.3876 Directory Traversal Vulnerability ====================================================== Vendor: smartertools.com SmarterMail 7.x 7.1.3876 Date: 2010-09-12 Author :...

SmarterMail 7.1.3876 - Directory Traversal

SmarterMail 7.1.3876 - Directory Traversal Note: Fixed by the vendor in version 7.2.3925 http://www.smartertools.com/smartermail/releasenotes/v7.aspx Vendor: smartertools.com SmarterMail 7.x 7.1.3876 | Bug : Directory Traversal, OS Command Injection, Other Critcal Vulns Vendor: smartertools.com...

MusicBox 3.3 - SQL Injection

MusicBox 3.3 - SQL Injection !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok Russian \n"; print " Special for Antichat forum.antichat.ru and xakep.ru \n"; print "\n"; print "\n Usage: exploit.pl host path "; print "\...

FreeBSD : pivot-weblog -- file deletion vulnerability (0fe73a4a-1b18-11de-8226-0030843d3802)

Secunia reports : A vulnerability has been discovered in Pivot, which can be exploited by malicious people to delete certain files. Input passed to the 'refkey' parameter in extensions/bbclonetools/count.php is not properly sanitised before being used to delete files. This can be exploited to...

smb-security-mode NSE Script

Returns information about the SMB security level determined by SMB. Here is how to interpret the output: User-level authentication: Each user has a separate username/password that is used to log into the system. This is the default setup of pretty much everything these days. Share-level...

PHP-AGTC Membership System 1.1a - Arbitrary Add Admin

PHP-AGTC Membership System 1.1a - Arbitrary Add Admin !/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they...

SOL7164 - Execution of UNIX shell commands from a URL without authentication

A URL that is accessible without first authenticating to the FirePass controller may be modified to inject UNIX shell commands. Under certain conditions, the commands can then be executed with user-level privileges. Any attacker with access to the FirePass logon page can theoretically launch this...

CVE-2006-5984

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the 1 txtCompanyName, 2 txtEmail, or 3 txtUserAccNum parameter to a users.asp, or the 4 setThemeColour parameter to b default.asp ...

CVE-2006-5984

Helm Web Hosting Control Panel 3.2.10 is affected by CVE-2006-5984: multiple XSS weaknesses in the Admin, Reseller, and User levels. The vectors include user input in (1) txtCompanyName, (2) txtEmail, (3) txtUserAccNum to users.asp; (4) setThemeColour to default.asp (Reseller/Admin) and (5) setTh...

CVE-2006-5983

CVE-2006-5983 concerns DirectAdmin 1.28.1 with multiple reflected XSS vectors. The connected PTSecurity entry details that remote authenticated users can inject arbitrary script/HTML via a range of parameters and commands: user parameter to CMD SHOW RESELLER/SHOW USER (Admin level); TYPE paramete...

CVE-2006-5984

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the 1 txtCompanyName, 2 txtEmail, or 3 txtUserAccNum parameter to a users.asp, or the 4 setThemeColour parameter to b default.asp ...

PT-2006-6644

Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.28.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters and commands, including the user parameter to CMD SHOW RESELLER or CMD...

directadmin-1281.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/directadmin.txt ----------------------------------------------------------- Software: DirectAdmin V1.28.1 DirectAdmin level used : Admin level PoC: http://target:2222/CMDSHOWRESELLER?userXSS...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

// source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memor...

phpbb2013user.txt

------------------------------------------------------------------------ phpBB 2.0.13 user level exploit By : Morinex e-mail : [email protected] date : 20-03-2005 greetz : Ali7 for helping me =P , Zeltha , code , ASC and w00pie.NL Exploit not founded by me! Dunno who is the founder of this bug. T...