Ubuntu: Security Advisory (USN-1187-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2011-18: Cross-Site Scripting in Arbor Peakflow X

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Arbor Peakflow X. XSS-vulnerable parameters are found on several web pages. The following parameters are vulnerable due to insufficient character escaping: a. /explore/entityinfo/ modestate...

PT-2011-07: Cross-Site Scripting in Cisco Small Business Devices

The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Cisco Small Business Devices. User input passed to "Display name" and "User ID" parameters of SIP INVITE request "FROM" field is not properly sanitized. This can be exploited to inject malicious...

ZDI-11-184: Oracle Java ICC Profile Sequence Description 'pseq' Tag Parsing Remote Code Execution Vulnerability

ZDI-11-184: Oracle Java ICC Profile Sequence Description 'pseq' Tag Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-184 June 8, 2011 -- CVE ID: CVE-2011-0862 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Oracle -- Affected Products:...

Silex <= 1.5.4.2 XSS Vulnerability - Active Check

Silex is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Ubuntu: Security Advisory (USN-1141-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: ftp-libopie

Checks if an FTPd is prone to CVE-2010-1938 OPIE off-by-one stack overflow, a vulnerability discovered by Maksymilian Arciemowicz and Adam 'pi3' Zabrocki. See the advisory at http://nmap.org/r /fbsd-sa-opie. Be advised that, if launched against a vulnerable host, this script will crash the FTPd...

AIX 710000 : U837297

The remote host is missing AIX PTF U837297 which is related to the security of the package X11.apps.msmit.7.1.0.15 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2011-1591

creationtimestamp| type| source ---|---|--- 2011-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17185 2011-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17195 2011-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17186 2018-05-29...

CVE-2011-1237

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Monkey's Audio - '.ape' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46887/info Monkeyâ??s Audio is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows attackers to execute arbitrary code in t...

Debian: Security Advisory (DSA-2149-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1080-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AIX 530010 : U840576

The remote host is missing AIX PTF U840576 which is related to the security of the package devices.pciex.2514300014108c03.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Batavi Detection

This host is running the open source ecommerce solution Batavia. OpenVAS Vulnerability Test $Id: gbbatavidetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Batavi Detection Authors: Michael Meyer Copyright: Copyright c 2011 Greenbone Networks GmbH This program is free software; you can redistribute it...

China CERT: We Missed Report On SCADA Hole

China’s Computer Emergency Response Team CERT admitted that it missed a September e-mail message from a researcher at NSS Labs that pointed out a critical vulnerability in a commonly used SCADA Supervisory Control And Data Acquisition software package. The lapse resulted in a gap of almost four...

Linux Kernel (Solaris 10 5.10 138888-01) - Local Privilege Escalation

Linux Kernel Solaris 10 5.10 138888-01 - Local Privilege Escalation / hoagiesolarissiocgtunparam.c LOCAL SOLARIS KERNEL ROOT EXPLOIT ipifill is used for mutex enter so we have to set the offet for an illt structure. Later putnext will be called with a queue see illt. We can use this queue to add ...

QuickPHP <= 1.10.0 Remote Source Code Disclosure Vulnerability - Active Check

QuickPHP is prone to a remote source code disclosure vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trixbox langChoice PHP Local File Inclusion

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding: utf-8 -- require 'msf/core' class...