Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu...

Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit

Exploit for unknown platform in category remote exploits =============================================================== Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit =============================================================== Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Ju...

Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit

No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX deleteReport 0day Remote Delete File Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; --...

CVE-2007-4031: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. dot dot in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll...

Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit

No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- object id="obj"...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu Start/Programy/Autostart/exec.bat"; milw0rm.com 2007-07-27...

Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit ===================================================================== Tested on Nessus 3.0.6 / IE 6 ...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File

Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File

Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...

JVN#34058672 Nessus report function vulnerable to arbitrary script execution

Nessus, a vulnerability scanner from Tenable Network Security, Inc., is capable of providing test reports in HTML format. The report in HTML format contains the target server's responses against Nessus scanning. Nessus fails to properly handle the responses. This may cause a script to be executed...

Cross site scripting

Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3546

Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3546: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability

An interesting SQL injection vulnerability was discovered in CubeCart v3.0.16. This vulnerability cannot easily be exploited by traditional means - in fact, the actual vulnerable variable was not discovered. As a piece of user input is passed to CubeCart, it is sanitized through a routine mySQLSa...

Dropbear SSH Server < 0.49.0 Hostkey Host Spoofing Vulnerability

Binary data 3929.prm...

Stompy (the session stomper) Vulnerability Scanner Detection

Binary data 3895.prm...

CVE-2007-0120

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

CVE-2007-0120: Undefined Security Weakness

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

Acunetix WVS <= 4.0 20060717 HTTP Sniffer Component Remote DoS

Exploit for unknown platform in category dos / poc ============================================================== Acunetix WVS = 4.0 20060717 HTTP Sniffer Component Remote DoS ============================================================== !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 =...

Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service

Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 = Build 20060717 HTTP Sniffer component Remote Denial of Service Explaination: I found a DoS in Acunetix WVS doing a little bit of fuzzing. The flaw is triggered wh...