Debian Security Advisory DSA 2765-1 (davfs2 - privilege escalation)

Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation. OpenVAS Vulnerability Test $Id: deb2765.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2765-1 using nvtgen 1.0 Script version: 1....

Ajax File And Image Manager 1.1 Code Execution

----------------------------------------------------------- PT-2013-41 Positive Technologies Security Advisory Arbitrary Code Execution in Ajax File and Image Manager ----------------------------------------------------------- --- Vulnerable software Ajax File and Image Manager Version: 1.1 and...

Debian Security Advisory DSA 2593-1 (moin - several vulnerabilities)

It was discovered that missing input validation in the twikidraw and anywikidraw actions can result in the execution of arbitrary code. This security issue is being actively exploited. This update also addresses path traversal in AttachFile. OpenVAS Vulnerability Test $Id: deb25931.nasl 6611...

Debian Security Advisory DSA 2393-1 (bip - buffer overflow)

Julien Tinnes reported a buffer overflow in the Bip multiuser IRC proxy which may allow arbitrary code execution by remote users. The oldstable distribution lenny is not affected by this problem. OpenVAS Vulnerability Test $Id: deb23931.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...

Debian Security Advisory DSA 2587-1 (libcgi-pm-perl - HTTP header injection)

It was discovered that the CGI module for Perl does not filter LF characters in the Set-Cookie and P3P headers, potentially allowing attackers to inject HTTP headers. OpenVAS Vulnerability Test $Id: deb25871.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2587-1 using...

Debian Security Advisory DSA 2592-1 (elinks - programming error)

Marko Myllynen discovered that ELinks, a powerful text-mode browser, incorrectly delegates user credentials during GSS-Negotiate. OpenVAS Vulnerability Test $Id: deb25921.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2592-1 using nvtgen 1.0 Script version: 1.0 Author:...

Adobe Shockwave Player Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'freeFTPd 1.0.10 PASS Command SEH...

Debian Security Advisory DSA 2744-1 (tiff - several vulnerabilities)

Pedro Ribeiro and Huzaifa S. Sidhpurwala discovered multiple vulnerabilities in various tools shipped by the tiff library. Processing a malformed file may lead to denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2744.nasl 6611 2017-07-07 12:07:20Z cfischer ...

http-csrf NSE Script

This script detects Cross Site Request Forgeries CSRF vulnerabilities. It will try to detect them by checking each form if it contains an unpredictable token for each user. Without one an attacker may forge malicious requests. To recognize a token in a form, the script will iterate through the...

[Xenotix XSS Exploit Framework v4] Advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting XSS vulnerability detection and exploitation framework. It provides Zero False Positive scan results with its unique Triple Browser Engine Trident, WebKit, and Gecko embedded scanner. It is claimed to have the world’s 2nd...

PT-2013-48: CRLF Injection in Oracle Containers for J2EE

The specialists of the Positive Research center have detected a CRLF Injection vulnerability in Oracle Containers for J2EE. Oracle Containers for J2EE does not properly validate the values from the HTTP headers. An attacker can use a crafted malicious HTTP response and display arbitrary data to t...

Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2859537)

This host is missing an important security update according to Microsoft Bulletin MS13-063. OpenVAS Vulnerability Test $Id: secpodms13-063.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel Privilege Elevation Vulnerabilities 2859537 Authors: Antu Sanadi Copyright: Copyright c 2013...

Microsoft Unicode Scripts Processor Remote Code Execution Vulnerability (2850869)

This host is missing an critical security update according to Microsoft Bulletin MS13-060. OpenVAS Vulnerability Test $Id: secpodms13-060.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Unicode Scripts Processor Remote Code Execution Vulnerability 2850869 Authors: Antu Sanadi Copyright: Copyright ...

Mozilla Firefox Multiple Vulnerabilities - August 13 (Mac OS X)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvulnaug13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Mozilla Firefox Multiple Vulnerabilities - August 13 Mac OS X Authors: Thanga Prakash S Copyright:...

PT-2013-81: Cross-Site Request Forgery in Siemens SIMATIC S7-1500 CPU PLC

The specialists of the Positive Research center have detected a Cross-Site Request Forgery vulnerability in Siemens SIMATIC S7-1500 CPU PLC. The web server of the affected PLCs port 80/tcp and port 443/tcp might allow CSRF Cross-Site Request Forgery attacks, compromising integrity and availabilit...

SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload

Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5 Date: 2013-08-17 Discovered by: Wesley Henrique Leite aka "spyk2r" Vendor Homepage: http://webhive.com.ua/ Software Link: http://webhive.com.ua/store/product.php?idproduct=46 Version: plugin Timeline 4.2.5p9 fo...

Online payment logic vulnerabilities summary-vulnerability warning-the black bar safety net

0×0 0 background description With Internet users increasingly accustomed to Online Shopping, there has been more and more e-Commerce sites, the online trading platform. Which certainly relates to the online payment process, and there is also a lot of logic. Since this involves money, if poorly...

Google Chrome Multiple Vulnerabilities-01 July13 (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01jul13win.nasl 6115 2017-05-12 09:03:25Z teissa $ Google Chrome Multiple Vulnerabilities-01 July13 Windows Authors: Arun Kallavi Copyright: Copyright c 2013...

GroundWork Monitor Enterprise Detection

The remote host has a version of GroundWork Monitor Enterprise installed. GroundWork Monitor Enterprise is a network application and cloud monitoring application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67017; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25...