ContentKeeper Web Appliance < 125.10 - Command Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ContentKeepe...

SquirrelMail HTTPS Session Cookie Secure Flag Weakness

The version of SquirrelMail installed on the remote host does not set the 'secure' flag for session cookies established when communicating over SSL / TLS. This could lead to disclosure of those cookies if a user issues a request to a host in the same domain over HTTP as opposed to HTTPS...

Sun OpenSSO / Java System Access Manager Login Module User Account Enumeration Weakness

The remote host is running Sun OpenSSO, or Sun Java System Access Manager as it was previously known, an enterprise-class product that provides web access management, federation, and web services security. The version of the Login module included with Sun OpenSSO / Sun Java System Access Manager ...

Sun Java System Access Manager 7.1 - 'Username' Enumeration

source: https://www.securityfocus.com/bid/33489/info Sun Java System Access Manager is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid usernames. This may aid them in...

Sun Java System Access Manager 7.1 - Username Enumeration

Sun Java System Access Manager 7.1 - Username Enumeration source: https://www.securityfocus.com/bid/33489/info Sun Java System Access Manager is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this...

DTSA-185-1 slurm-llnl - cryptographic weakness

Bulletin has no description...

[SECURITY] [DSA 1702-1] New ntp packages fix cryptographic weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1702-1 [email protected] http://www.debian.org/security/ Florian Weimer January 12, 2009 http://www.debian.org/security/faq -...

DSA-1702-1 ntp - cryptographic weakness

Bulletin has no description...

DSA-1703-1 bind9 - cryptographic weakness

Bulletin has no description...

DSA-1701-1 openssl openssl097 - cryptographic weakness

Bulletin has no description...

Debian GNU/Linux XTERM (DECRQSS/comments) Weakness Vulnerability

No description provided by source. Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print "\eP$q\nbad-command\n\e\"'...

Debian GNU/Linux XTERM (DECRQSS/comments) Weakness Vulnerability

Exploit for linux platform in category local exploits ================================================================ Debian GNU/Linux XTERM DECRQSS/comments Weakness Vulnerability ================================================================ Package: xterm Version: 222-1etch2 Severity: grave...

TOR Privilege Escalation Vulnerability (Windows)

This host is installed with TOR and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodtorprivilegeescalationwin.nasl 5370 2017-02-20 15:24:26Z cfi $ TOR Privilege Escalation Vulnerability Windows Authors: Sujit Ghosal Copyright c 2008 SecPod,...

chicomas 2.0.4 XSS / Database Disclosure

www.BugReport.ir AmnPardaz Security Research Team Title: chicomas Dtabase Information Disclosure POC: http://URL/chicomas/config.inc +--The Latest generated Database backups POC: http://URL/chicomas/backup +--Cross Site Scripting XSS. Reflected XSS attack in "index.php" in "q" parameter. POC:...

CVE-2008-5714

Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended...

chicomas &lt;= 2.0.4 (DB Backup/DD/XSS) Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: chicomas =2.0.4 Multiple Vulnerabilities Vendor: http://www.chicomas.com/ Demo: http://demo.opensourcecms.com/chicomas Bug: Database Information Disclosure, Authorization Weakness, XSS Vulnerable Version:...

chicomas <= 2.0.4 (DB Backup/DD/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= chicomas Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 AmnPardaz...

Adobe Acrobat 9 PDF Document Encryption Weakness Vulnerability (Windows)

This host has Adobe Acrobat installed and is prone to encryption weakness vulnerability. OpenVAS Vulnerability Test $Id: gbadobeacrobatpdfvulnwin.nasl 5370 2017-02-20 15:24:26Z cfi $ Adobe Acrobat 9 PDF Document Encryption Weakness Vulnerability Windows Authors: Chandan S Copyright: Copyright c...

Adobe Acrobat 9 PDF Document Encryption Weakness Vulnerability - Windows

Adobe Acrobat is prone to an encryption weakness vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GNU Classpath 0.97.2 - 'gnu.java.security.util.PRNG' Class Entropy (2)

source: https://www.securityfocus.com/bid/32909/info GNU Classpath is prone to a weakness that may result in weaker cryptographic security because its psuedo-random number generator PRNG lacks entropy. Attackers may leverage this issue to obtain sensitive information that can lead to further...