4353 matches found
Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu Start/Programy/Autostart/exec.bat"; milw0rm.com 2007-07-27...
Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit ===================================================================== Tested on Nessus 3.0.6 / IE 6 ...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...
JVN#34058672 Nessus report function vulnerable to arbitrary script execution
Nessus, a vulnerability scanner from Tenable Network Security, Inc., is capable of providing test reports in HTML format. The report in HTML format contains the target server's responses against Nessus scanning. Nessus fails to properly handle the responses. This may cause a script to be executed...
Cross site scripting
Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-3546
Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability
An interesting SQL injection vulnerability was discovered in CubeCart v3.0.16. This vulnerability cannot easily be exploited by traditional means - in fact, the actual vulnerable variable was not discovered. As a piece of user input is passed to CubeCart, it is sanitized through a routine mySQLSa...
Dropbear SSH Server < 0.49.0 Hostkey Host Spoofing Vulnerability
Binary data 3929.prm...
Stompy (the session stomper) Vulnerability Scanner Detection
Binary data 3895.prm...
CVE-2007-0120
Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...
Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service
Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 = Build 20060717 HTTP Sniffer component Remote Denial of Service Explaination: I found a DoS in Acunetix WVS doing a little bit of fuzzing. The flaw is triggered wh...
Acunetix WVS <= 4.0 20060717 HTTP Sniffer Component Remote DoS
Exploit for unknown platform in category dos / poc ============================================================== Acunetix WVS = 4.0 20060717 HTTP Sniffer Component Remote DoS ============================================================== !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 =...
Ultimate PHP Board chat/login.php username Parameter Script Injection
Binary data 3872.prm...
FreeBSD : drupal -- multiple XSS vulnerabilities (b2383758-5f15-11db-ae08-0008743bf21a)
The Drupal Team reports : A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS attack via a specially crafted RSS feed. This...
SiVus VOIP Vulnerability Scanner Detection (deprecated)
Binary data 3761.prm...
Sipsak VOIP Vulnerability Scanner Detection (deprecated)
Binary data 3765.prm...
SquirrelMail < 1.4.8 Local File Inclusion
Binary data 3639.prm...