2753 matches found
Opera < 7.54u1 Download Box Spoofing
Binary data 2467.prm...
PHP <= 4.3.9 & phpBB 2.x with unserialize() Remote Exploit (compiled)
Exploit for unknown platform in category web applications ===================================================================== PHP tested : phpbbmemorydump.exe "http://site.com/phpbb/" 30000 -cookiename=phpbb2support a.txt result: - string detected : /home/virtual/site.com/phpBB/config.php -...
Squid < 2.5.STABLE8 Malformed Host Name Error Message Information Disclosure
According to its banner, the version of Squid running on the remote host is prior to 2.5.STABLE8. It is, therefore, affected by an information disclosure vulnerability due to improper handling of malformed host names. An unauthenticated, remote attacker can exploit this issue to disclose the...
CVE-2004-0263
PHP 4.3.4 and earlier in Apache 1.x and 2.x modphp can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information...
Cscope 13.015.x - Insecure Temporary File Creation (2)
Cscope 13.015.x - Insecure Temporary File Creation 2 // source: https://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility...
chacmool Private Message System 1.1.3 - 'send.php?tid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11671/info Private Message System is reported prone to multiple vulnerabilities that can allow remote attackers to carry out cross-site scripting attacks and disclose arbitrary private messages. Private Message System 1.1.3 is reported vulnerable to these...
Cherokee Web Server URI Traversal Arbitrary File Access
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to directory traversal flaw when appending a '../' sequence to the web request. Additionally, this version fails to drop root privileges after it binds to listen port. Remote attack...
CVE-2004-0835
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities...
CVE-2004-0837
MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service crash or hang via multiple threads that simultaneously alter MERGE table UNIONs...
BSD bmon <= 1.2.1_2 Local Exploit
Exploit for bsd platform in category local exploits ================================= BSD bmon default: $BMONEXEC" "$" -gt "0" && BMONEXEC="$1" -x "$BMONEXEC" || echo "$BMONEXEC not found" exit cd /tmp apparently bmon closes stdout, so we run a shell with stdout redirected to stderr. cat ./netsta...
BSD bmon <= 1.2.1_2 Local Exploit
No description provided by source. !/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon 1.2.12 installed. when bmon is executed with the -n parameter it popens netcat but fail to provide an absoluth path. some bsds are configured with acls that...
Squid 2.5.x < 2.5.STABLE8 Information Disclosure
Binary data 2448.prm...
Jetty Web Server < 4.2.4 Directory Traversal Arbitrary File Access
Binary data 2351.prm...
Horde IMP HTML MIME Viewer Multiple XSS
The target is running at least one instance of IMP whose version number is between 3.0 and 3.2.5 inclusive. Such versions are vulnerable to several cross-site scripting attacks when viewing HTML messages with the HTML MIME viewer and certain browsers. Nessus has determined the vulnerability exist...
WordPress < 1.2.2 Multiple XSS
The remote version of WordPress is vulnerable to cross-site scripting attacks due to a failure of the application to properly sanitize user- supplied URI input. As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be...
WordPress Core 1.2 - 'categories.php?cat_ID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11268/info It is reported that Wordpress is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. Wordpress 1.2 is reported vulnerable, however, other...
Zinf Audio Player 2.2.1 - Local Buffer Overflow
Zinf Audio Player 2.2.1 - Local Buffer Overflow / -------------------------------Advisory---------------------------------- Luigi Auriemma I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version of Zinf. In short, Zi...
MySQL libmysqlclient Prepared Statements API Overflow
You are running a version of MySQL 4.1.x, which is older than version 4.1.5. There is a flaw in the remote version of this software that could allow an attacker to crash the affected service, thus denying access to legitimate users. C Tenable Network Security, Inc. include"compat.inc"; if...
Apache <= 2.0.51 Satisfy Directive Access Control Bypass
The remote host is running Apache web server 2.0.51. It is reported that this version of Apache is vulnerable to an access control bypass attack. This issue occurs when using the 'Satisfy' directive. An attacker may gain unauthorized access to restricted resources if access control relies on this...
Subversion < 1.0.8 / 1.1.0-rc4 mod_authz_svn Unreadable Path Metadata Information Disclosure
You are running a version of Subversion which is older than 1.0.8 or 1.1.0-rc4. A flaw exists in older version, in the apache module modauthzsvn, which fails to properly restrict access to metadata within unreadable paths. An attacker can read metadata in unreadable paths, which can contain...