821 matches found
Directory Manager edit_image.php Arbitrary Command Execution
Directory Manager is installed and does not properly filter user input. A remote attacker may use this flaw to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid11104; scriptversion"1.26";...
Cobalt Qube WebMail readmsg.php mailbox Parameter Traversal Arbitrary File Access
The file '/base/webmail/readmsg.php' was detected on the remote web server. Some versions of this CGI allow remote users to read local files with the permission of the web server. Nessus just checked the presence of this file but did not try to exploit the flaw. %NASLMINLEVEL 70300 C Tenable...
ping.asp CGI Arbitrary Command Execution
The 'ping.asp' CGI is installed. Some versions allow an attacker to launch a ping flood against the targeted machine or another by entering '127.0.0.1 -l 65000 -t' in the Address field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Er...
Citrix Client Access Verification
Your professional opinions are appreciated. About a month ago I had posted the below as a Citrix Client Access Advisory and got several responses to the fact that it either it was not a valid vulnerabilty or that it was a default configuration problem. which may be true. but consider this. The...
Apache Auth Module SQL Injection
The 'modauthpgsqlsys' module is prior to 0.9.6. It is, therefore, affected by a SQL injection vulnerability that allows an attacker to bypass authentication. Script to check for Apache Authentication Modules SQL Insertion Vulnerability This script is copyright c 2001 Matt Moore modifications by r...
Tripwire for Webpages Installation Disclosure
The remote host is running Tripwire for Webpages, a commercial product to monitor for changes in web pages. This information may prove useful to anyone doing reconnaissance before launching an actual attack. %NASLMINLEVEL 70300 C Tenable Network Security include'deprecatednasllevel.inc';...
MS00-089: Domain Account Lockout Vulnerability (274372)
The hotfix for the 'domain account lockout' problem has not been applied. This vulnerability allows a user to bypass the domain account lockout policy, and hence attempt to brute-force a user account. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10555;...
Distributed GL Daemon (DGLD) allows attackers to identify IRIX systems
Overview Attackers are using the presence of the dgld service to identify SGI IRIX systems. Description The CERT/CC has received multiple reports of an apparent vulnerability in the Distributed GL Daemon on SGI IRIX systems. Upon further investigation, it is our belief that no vulnerability exist...
(SRADV00002) Remote root compromise through pam_smb and pam_ntdom
================================================= Secure Reality Pty Ltd. Security Advisory 1 SRADV00002 http://www.securereality.com.au ================================================= Title Remote root compromise through pamsmb and pamntdom Released 11/09/2000 Vulnerable pamsmb - stable versio...
RobTex Viking Server 1.0.6 Build 355 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/1614/info A number of unchecked buffers exists in Robotex Viking Server. This enables a malicious user to either crash the application or execute arbitrary code, depending on the data supplied. / Robotex Viking Server Buffer Overflow Vulnerability Xplo...
CVE-2025-53873
CVE-2025-53873 is rejected/not used per the Initial Description and does not represent an active vulnerability entry.
CVE-2025-48874
The active CVE here is CVE-2025-5257 (duplicate of CVE-2025-48874). It describes a vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and indexed by search engines due to insufficient authorization checks on predictable URLs (e.g., /page/preview/1)....