Samba smbmnt Local Privilege Escalation

According to its banner, the version of Samba running on the remote host is in the 2.x or 3.x branch. Such versions are shipped with a utility called 'smbmnt'. When smbmnt has the setuid 'root' bit set, a local user with access to the victim can mount a Samba share and then execute a setuid or...

Researcher Warns Of Exploitable Hole In Chinese Translation Software NJStar

UPDATE: An independent security researcher has warned officials in Australia, the US and China about a serious, remotely exploitable hole in language translation software that is used by leading corporations, universities and governments. Dillon Beresford said a stack overflow vulnerability in a...

WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure

Title : WHMCompleteSolution cart.php Local File Disclosure Author : Lagripe-Dz Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 10/01/2011 Version : 3.x.x , 4.0.x Tested on : linux+apache ================================================================ Vuln file: cart.php...

WHMCompleteSolution (WHMCS) 3.x 4.0.x - cart.php Local File Disclosure

WHMCompleteSolution WHMCS 3.x 4.0.x - cart.php Local File Disclosure Title : WHMCompleteSolution cart.php Local File Disclosure Author : Lagripe-Dz Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 10/01/2011 Version : 3.x.x , 4.0.x Tested on : linux+apache...

CentOS Update for nfs-utils CESA-2009:1321 centos5 i386

Check for the Version of nfs-utils OpenVAS Vulnerability Test CentOS Update for nfs-utils CESA-2009:1321 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

IBM Lotus Symphony Multiple Vulnerabilities - Linux

IBM Lotus Symphony is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Python Multiple Vulnerabilities (Windows)

This host is installed with Python and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbpythonmultvulnwin.nasl 8160 2017-12-18 15:33:57Z cfischer $ Python Multiple Vulnerabilities Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...

vBulletin 3.x vBExperience Cross Site Scripting

Author : Mr.ThieF alert1; Example : http://www.worldwide-invest.org/xperience.php?sortfield=xr&sortorder="alert1; GreeTz : RENO 3 - x-CoD3r 3 - T3rr0risT07 3 -Snip3rwww - ALL My FrindS 3...

DEBIAN-CVE-2011-1518

Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

OpenOffice.org 'soffice' Directory Traversal Vulnerability - Windows

OpenOffice is prone to directory traversal vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC

!/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWORD PTR SS:ESP+3C - move length into...

Invision Power Board 3 SQL Injection

============================================================ Exploit Title: Invision Power Board 3 Multiple Vuln Date: 13/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.invisionpower.com/ Vulnerability Type: Full Path Disclosure Version: 3.x.x All 3...

Samba 3.x < 3.3.13 SMB1 Packet Chaining Memory Corruption

Binary data 5572.prm...

LionWiki 3.X (index.php) Shell Upload Vulnerability

Exploit for php platform in category web applications =================================================== LionWiki 3.X index.php Shell Upload Vulnerability =================================================== Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author:...

Jira Atlassian File Attachment Download

Exploit for multiple platform in category web applications ======================================= Jira Atlassian File Attachment Download ======================================= Exploit Title: Jira Atlassian Date: 28/3/2010 Author: Ignacio Garrido Mail: Ign.sec gmail com Software Link:...

X-lite SIP v3 (wav) memory corruption Heap BOF exploit

Exploit for unknown platform in category local exploits ====================================================== X-lite SIP v3 wav memory corruption Heap BOF exploit ====================================================== !/usr/bin/python X-lite SIP v3 wav memory corruption Heap BOF exploit Date:...

Fedora Core 12 FEDORA-2009-13381 (postgresql)

The remote host is missing an update to postgresql announced via advisory FEDORA-2009-13381. OpenVAS Vulnerability Test $Id: fcore200913381.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13381 postgresql Authors: Thomas Reinke Copyright: Copyright ...

Insecure Saving Of Downloadable File In Mozilla Firefox (Linux)

This host is installed with Mozilla Firefox and is prone to insecure saving of downloadable file. OpenVAS Vulnerability Test $Id: secpodfirefoxinsecuresavingdownloadfile.nasl 5055 2017-01-20 14:08:39Z teissa $ Insecure Saving Of Downloadable File In Mozilla Firefox Linux Authors: Sharath S...

Three Pillars Help Desk 3 SQL Injection

-------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] ------------------------------------------------------- Script:He...

OpenOffice EMF File Parser Remote Command Execution Vulnerability (Linux)

The host has OpenOffice installed and is prone to Remote Command Execution Vulnerability OpenVAS Vulnerability Test $Id: secpodopenofficeemffileparservulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenOffice EMF File Parser Remote Command Execution Vulnerability Linux Authors: Antu Sanadi...