Numara / BMC Track-It! FileStorageService Arbitrary File Upload

This module exploits an arbitrary file upload vulnerability in Numara / BMC Track-It! v8 to v11.X. The application exposes the FileStorageService .NET remoting service on port 9010 9004 for version 8 which accepts unauthenticated uploads. This can be abused by a malicious user to upload a ASP or...

Microsoft Internet Explorer CVE-2014-4080 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

SmarterTools SmarterMail <= 11.x XSS Vulnerability

SmarterTools SmarterMail is prone to stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer Multiple Vulnerabilities (2862772)

This host is missing a critical security update according to Microsoft Bulletin MS13-059. OpenVAS Vulnerability Test $Id: secpodms13-059.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Internet Explorer Multiple Vulnerabilities 2862772 Authors: Thanga Prakash S Copyright: Copyright c 2013 SecPo...

Adobe Flash Player Remote Code Execution Vulnerability -June13 (Linux)

This host is installed with Adobe Flash Player and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayercodeexecvulnjun13lin.nasl 6065 2017-05-04 09:03:08Z teissa $ Adobe Flash Player Remote Code Execution Vulnerability -June13 Linux Authors: Arun...

Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 (Mac OS X)

This host is installed with Adobe Acrobat and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultunspecifiedvuln01feb13macosx.nasl 27950 2013-02-19 19:32:21Z feb$ Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 Mac OS X Authors: Thanga...

PT-2012-4562

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects the availability of the system and is related to the Gnome Display Manager GDM. Recommendations For Oracle Sun Solaris version 11, at the moment, there is no information about a newer...

Symantec Endpoint Protection Manager < 11 RU7 MP2 (SYM12-007 / SYM12-008) (credentialed check)

The version of Symantec Endpoint Protection Manager installed on the remote host is less than 11 RU7 MP2 11.7.7200 and has the following vulnerabilities : - A denial of service vulnerability exists that could cause the web server to stop serving pages and, in some cases, crash the server. This...

PT-2012-2307

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Express Description The issue affects the availability of the system and is related to the Kernel. The exact nature of the vulnerability and the vectors used to exploit it are not specified. Recommendations For Oracle...

PT-2012-2301

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Express Description The issue affects confidentiality and is related to the ksh93 Shell in Oracle Solaris. The exact vectors of the issue are not specified. Recommendations For Oracle Solaris version 11 Express, at th...

HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities

This host is running HP SiteScope and is prone to cross-site scripting and session fixation vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsitescopexssnsessionfixationvuln.nasl 5390 2017-02-21 18:39:27Z mime $ HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities Authors:...

PT-2011-3746

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Express Description The issue affects the availability of the system and is related to Zones. Local users can exploit this issue via unknown vectors. Recommendations For Oracle Solaris version 11 Express, at the momen...

Google Chrome WebGL Texture Information Disclosure Vulnerability (Windows)

This host is installed with Google Chrome and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromewebgltextureinfodiscvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome WebGL Texture Information Disclosure Vulnerability Windows Authors: Shash...

PT-2011-2690

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Express Description The issue affects the availability of the system and is related to TCP/IP. Recommendations For Oracle Solaris version 11 Express, at the moment, there is no information about a newer version that...

Microsoft Windows Media Player '.mpg' Buffer Overflow Vulnerability

The host is installed with Windows Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowsmediaplayerbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft Windows Media Player '.mpg' Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright:...

Microsoft Windows Media Player '.mpg' Buffer Overflow Vulnerability

Windows Media Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2009-4905 · Microsoft · Windows Media Format Runtime +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Format Runtime versions 9.0, 9.5, and 11 Windows Media Services versions 9.1 and 2008 Description: The issue arises from the improper parsing of malformed headers in Advanced Systems Format ASF files, which can lead to...

RealPlayer SWF Frame Handling Buffer Overflow Vulnerability (Windows)

This Remote host is running with RealPlayer, which is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrealplayerswfbofvuln900015.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: RealPlayer SWF Frame Handling Buffer Overflow Vulnerability Windows Authors: Chandan...

real-overflow.txt

There are multiple stack overflows in the ierpplug.dll ActiveX Control. These issues were originally discovered by shinnai, http://www.securityfocus.com/bid/22811 and http://www.securityfocus.com/bid/21802. I am adding the Import and PlayerProperty functions to the list. This was tested on Window...

aria-cpanel.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=68 ----------------------------------------------------------- Vulnerability: cPanel Version 11 Pops.Html Cross-Site Scripting PoC: http://target:2082/mail/pops.html?domain=XSS Contact:...