PA168 Chipset IP Phones Weak Session Management Exploit

No description provided by source. !/bin/bash PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability Author: Adrian Pastor adrian.pastor-AT-procheckup.com from ProCheckUp This advisory has been published following consultation with UK NIS...

subscribe (pwd.txt) Remote Password Disclosur

subscribe pwd.txt Remote Password Disclosur D0rk = "Powered By PHP Subscriber" discovered by : ThE TiGeR 100 Exploit : http://www.site.com/path/pwd.txt or http://www.site.com/pwd.txt then crack the password with bass64 decode ,,the password is coded by base64 not hash Contact:[email protected]...

TimberWolf 1.2.2 vulnerable to XSS

-=--------------------ADVISORY-------------------=- TimberWolf 1.2.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: TimberWolf -=+ Version: 1.2.2 -=+ Vendor's URL: http://cms.gamezrule.org/index.php -=+ Platform: WindowsLinuxUnix -=+ Bug typ...

paypalXSScorry.txt

-=--------------------ADVISORY-------------------=- PayPal.com Author:CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: PayPal.com -=+ Version: -=+ Vendor's URL: www.paypal.com -=+ Platform: Linux\Unix -=+ Bug type: XSS -=+ Exploitation: Remote/Local -...

MS Windows PNG File IHDR Block Denial of Service Exploit PoC (c) (2)

Exploit for unknown platform in category dos / poc ==================================================================== MS Windows PNG File IHDR Block Denial of Service Exploit PoC c 2 ==================================================================== // Microsoft Windows PNG IHDR block DoS PoC...

MS Windows PNG File IHDR Block Denial of Service Exploit PoC (c) (2)

No description provided by source. // Microsoft Windows PNG IHDR block DoS PoC 2 // // CPU load goes to 100% until you restart explorer.exe // // Bug found by: Preddy ? // // Compiled and tested with Windows XP SP2, Visual studio 6, no psdk // // Header: 89 50 4e 47 0d 0a // // Greets: scoper,...

ISS RealSecure / BlackICE DoS

Bug in SMBMailSlotHeapOverflow MS06-035/KB917159 vulnerability attack detection leads to 100 CPU usage...

ipswitch_dos.txt

Synopsis: IPSwitch WhatsUp Professional 2006 DoS Flaw Product: IPSwitch WhatsUp http://www.ipswitch.com Version: Confirmed on WhatsUp Professional 2006 Author: Josh Zlatin-Amishav Date: February 22, 2006 Background: WhatsUp Professional 2006 is application and network management that keeps your...

The latest hacking techniques: the XSS cross-site scripting attack detailed description-vulnerability warning-the black bar safety net

General description A simple description of what isXSSattack How to findXSSvulnerability ForXSSattack the General idea From internal attacks: How to find the internalXSSvulnerability How to construct attack How to use The junction of any instances of attacks, such as DVBBS&BBSXP From external...

CVE-2005-2182

Grandstream BudgeTone BT 100 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...

PT-2005-3111 · Grandstream · Grandstream Budgetone (Bt) 100

Name of the Vulnerable Software and Affected Versions: Grandstream BudgeTone BT 100 affected versions not specified Description: The issue concerns the Grandstream BudgeTone BT 100 Voice over IP VoIP phones, which do not properly validate certain values in a NOTIFY message. This allows remote...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The...

BisonFTP 4R1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/14079/info BisonFTP is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users. Reports indicate that the issue may be exploited only after successful authentication. !/usr/bin/pytho...

RHEL 4 : mod_python (RHSA-2005:100)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:100 advisory. Modpython is a module that embeds the Python language interpreter within the Apache web server, allowing handlers to be written in Python. Graham...

3COM NBX 100 DoS

No description provided...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-1999-1174

The CVE-1999-1174 entry describes a physical-access vulnerability in Iomega ZIP-100 drives: an attacker can bypass password protection by inserting a disk with a known password, allowing the drive to power down, swapping to the target disk, and then using the known password to access it. The root...