INDEXU <= 5.0.1 (base_path) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl INDEXU = 5.0.1 basepath Remote File Inclusion Exploit Bug Found & code By K-159 base on advisory at http://echo.or.id/adv/adv26-K-159-2006.txt code reference from ExploiterCode.com www.echo.or.id c 2006 usage: perl indexu.pl target cmd shell...

INDEXU 5.0.1 - base_path Remote File Inclusion

INDEXU 5.0.1 - basepath Remote File Inclusion !/usr/bin/perl INDEXU perl indexu.pl http://target.com/indexu/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...

Authentication flaw

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0374: Improper Authentication

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

Echo Security Advisory 2005.22

ECHOADV22$2005 --------------------------------------------------------------------------- PunBB BBCode IMG Tag Script Injection Vulnerability --------------------------------------------------------------------------- Author: y3dips Date: August, 20th 2005 Location: Indonesia, Jakarta Web:...

Echo Security Advisory 2005.18

--------------------------------------------------------------------------- ECHOADV18$2005 Multiple SQL INJECTION in Ublog Reload 1.0.5 --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 20th 2005 Location: Indonesia, Jakarta Web:...

CVE-2002-1632: Undefined Security Weakness

Oracle 9i Application Server 9iAS installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via 1 info.jsp, 2 printenv, 3 echo, or 4 echo2...

HP-UX Security patch : PHNE_9030

The remote host is missing HP-UX Security Patch number PHNE9030 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17063;...

HP-UX Security patch : PHNE_9032

The remote host is missing HP-UX Security Patch number PHNE9032 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17061;...

HP-UX Security patch : PHNE_9037

The remote host is missing HP-UX Security Patch number PHNE9037 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17056;...

HP-UX Security patch : PHNE_8064

The remote host is missing HP-UX Security Patch number PHNE8064 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16825;...

HP-UX Security patch : PHNE_8168

The remote host is missing HP-UX Security Patch number PHNE8168 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16801;...

HP-UX Security patch : PHNE_9035

The remote host is missing HP-UX Security Patch number PHNE9035 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17058;...

HP-UX Security patch : PHNE_9031

The remote host is missing HP-UX Security Patch number PHNE9031 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17062;...

HP-UX Security patch : PHNE_9033

The remote host is missing HP-UX Security Patch number PHNE9033 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17060;...

Null Payload ICMP

Some worms, such as Sasser, use ICMP echo request packets with null payload to detect potentially vulnerable hosts...

CVE-2004-0819

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...

CVE-2004-0819: Undefined Security Weakness

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...