Retrospect Backup Client <= 7.5.116 Multiple Vulnerabilities (ESA-08-009)

Binary data 4606.prm...

WordPress < 2.5.1 Crafted Cookie Authentication Bypass

Binary data 4488.prm...

RedDot CMS 7.5 - 'LngId' SQL Injection

!/usr/bin/env python un-comment your selection. import urllib2 import urllib import string import getopt import sys def banner: print print "RED DOT CMS 7.5 database enumeration" print "by Mark Crowther and Rodrigo Marcos" def usage: print print "usage:" print "python RDPOC.py options URL" print...

[Full-disclosure] Oracle - Hardcoded Password and Password Reset of OUTLN User [DB13]

Oracle - Hardcoded Password and Password Reset of OUTLN User DB13 Systems Affected 9i Rel. 1 - 10g Rel. 2 Severity High Risk Category Hardcoded Default Password & Password Reset Vendor URL http://www.oracle.com/ Author Alexander Kornbrust Advisory 16 April 2008 V 1.00 Advisory URL...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : tetex-bin, texlive-bin vulnerabilities (USN-554-1)

Bastien Roucaries discovered that dvips as included in tetex-bin and texlive-bin did not properly perform bounds checking. If a user or automated system were tricked into processing a specially crafted dvi file, dvips could be made to crash and execute code as the user invoking the program...

SeaMonkey < 1.1.7 Multiple Vulnerabilities

Binary data 4298.prm...

openSUSE 10 Security Update : acroread (acroread-2506)

The Adobe Acrobat Reader has been updated to version 7.0.9. This update also includes following security fixes : CVE-2006-5857: A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to code execution. CVE-2007-0044: Universal Cross Site Request Forgery CSRF problems...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-3979)

This update fixes multiple bugs in php : - predictable generaton of an initialization vector IV in the mcrypt extension - additional cookie attributes could be injected via a session id - specially crafted files could cause integer overflows in gd and leverage them to at least crash gd based...

CVE-2007-4062

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability...

Directory traversal

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability...

Directory traversal

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...

CVE-2007-4061

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...

CVE-2007-4061

CVE-2007-4061 : Directory traversal via .. in the Nessus ScanCtrl ActiveX (SCANCTRL.ScanCtrlCtrl.1 in scan.dll) allows remote creation/overwrite of arbitrary files through saveNessusRC, potentially enabling code execution by writing to a Startup folder. Affected product: Nessus Vulnerability Scan...

CVE-2007-4062

CVE-2007-4062 affects Nessus Vulnerability Scanner 3.0.6 via the SCANCTRL.ScanCtrlCtrl.1 ActiveX (scan.dll). The vulnerability arises in the deleteNessusRC method, likely a directory traversal, allowing remote attackers to delete arbitrary files. Related Nessus NASL indicates Nessus for Windows v...

CVE-2007-4061

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...

CVE-2007-4031

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. dot dot in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll...

CVE-2007-4031

CVE-2007-4031 affects Nessus Vulnerability Scanner for Windows prior to 3.0.6.1, in the ScanCtrl ActiveX control (SCANCTRL.ScanCtrlCtrl.1 in scan.dll). The flaw allows directory traversal: an attacker who lures a user to a crafted page can cause deleteReport to send a .. path, enabling deletion o...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu...

Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit

No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- object id="obj"...

Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit

No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX deleteReport 0day Remote Delete File Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; --...