VolksBank ZU Application - Auth Bypass Vulnerability

Document Title: =============== VolksBank ZU Application - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=382 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 382...

Avaya WinPDM UniteHostRouter <= 3.8.2 Pre-Auth Command Execute

Exploit for windows platform in category remote exploits Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result = 1;...

Avaya WinPDM UniteHostRouter 3.8.2 - Remote Command Execution

Avaya WinPDM UniteHostRouter 3.8.2 - Remote Command Execution Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result =...

Canopus Internet Banking FIVE SQL Injection

Title: ====== Canopus Internet Banking FIVE - Auth Bypass Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=305 VL-ID: ===== 305 Introduction: ============= Automation of banks, small and medium sized, money transfer systems, corporate...

PHPDomainRegister 0.4a-RC2-dev Cross Site Scripting / SQL Injection

Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal | | Dr.Bnned ahwak2000 sa^Dev!L |...

PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities

Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal | | Dr.Bnned ahwak2000 sa^Dev!L |...

PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities

PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs...

PHPDomainRegister v0.4a-RC2-dev Multiple Vulnerabilities

Exploit for php platform in category web applications Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n...

CVE-2011-5062

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

CVE-2011-5062: Undefined Security Weakness

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

Canopus Internet Banking FIVE - Auth Bypass Vulnerability

Document Title: =============== Canopus Internet Banking FIVE - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=305 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Canopus Internet Banking FIVE - Auth Bypass Vulnerability

Document Title: =============== Canopus Internet Banking FIVE - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=305 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Paddelberg Topsite Script Insecure Cookie

Exploit Title: Paddelberg's topsite-script admin auth bypass. Google Dork: intext:"powered by php scripte webmaster resource" Date: 8. 1. 2012 Author: Christian Inci Software Link: http://www.paddelberg.de/gratis-toplisten-script/gratis-download/ Version: = 1.23 22. 9. 2007 Tested on: 1.23 Vendor...

Default credentials

Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files...

PT-2011-5088

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as it receives cleartext password input over HTTP. This is demonstrated by forms in...

CVE-2011-4758: Undefined Security Weakness

Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files...

PT-2011-5087

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to bypass authentication by leveraging an unattended workstation. This is because the password form field is generated without disabling the...

PT-2011-5124

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.7h Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the login username parameter in the auth login.php file. Recommendations For versions prior to 0.8.7h, update to...