Default Password (bank) for 'bank' Account

The account 'bank' on the remote host has the default password 'bank'. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "bank"; password = "bank";...

Matt Wright guestbook.pl Arbitrary Command Execution

The Matt Wright guestbook.pl 'Matt Wright guestbook.pl Arbitrary Command Execution', 'Description' = %q The Matt Wright guestbook.pl 'aushack' , 'License' = MSFLICENSE, 'References' = 'CVE...

CVE-2008-1999

CVE-2008-1999 affects Apple Safari 3.1.1, where an attacker can spoof the address bar by inserting numerous invisible characters in the userinfo subcomponent of the URL’s authority (the user field), demonstrated with %E3%80%80. The vulnerability’s impact is spoofing the address bar; the connected...

Solaris ypupdated Command Execution

This exploit targets a weakness in the way the ypupdated RPC application uses the command shell when handling a MAP UPDATE request. Extra commands may be launched through this command shell, which runs as root on the remote host, by passing commands in the format '|'. Vulnerable systems include...

Default Password (dottie) for 'root' Account

The account 'root' has the password 'dottie'. An attacker may use this to gain further privileges on this system %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "dottie"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31800;...

CVE-1999-0209

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5366 2010-07-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16326 2018-05-29 15:50:33+00:00| seen|...

Debian Security Advisory DSA 576-1 (squid)

The remote host is missing an update to squid announced via advisory DSA 576-1. OpenVAS Vulnerability Test $Id: deb5761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 576-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 308-1 (gzip)

The remote host is missing an update to gzip announced via advisory DSA 308-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service degraded networking and logging via a flood of TCP SYN packets, a related issue to CVE-1999-0116...

CVE-2003-1496

Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840...

Design/Logic Flaw

The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to...

CVE-2007-4733

The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to...

CVE-1999-1592

Technical details about CVE-1999-1592 are not publicly provided in the supplied documents; no explicit affected products, vulnerable components, root cause, or remediation are present. Monitor for updates.

CVE-1999-1591

Microsoft IIS 4.0 SP4, without certain hotfixes for SP4, can bypass authentication under certain conditions, enabling remote attackers to access resources without credentials. Demonstrated via Visual InterDev 6.0. The Red Hat and CVE listings corroborate this description. Practical impact per ava...

Command injection

BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command, a variant of CVE-1999-0017...

CVE-2007-1999

Vulnerability : CVE-2007-1999 is a PHP remote file inclusion in Weatimages up to version 1.7.1, triggered when weatimages.ini is missing. an attacker can supply a URL in the ini[langpack] parameter to index.php to execute arbitrary PHP code on the server. Affected versions : Weatimages 1.7.1 and ...

Command injection

The ps /usr/ucb/ps command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument, a similar issue to CVE-1999-1587...

CVE-2006-6947

The FTP server in the NEC MultiWriter 1700C allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command, a variant of CVE-1999-0017...

War-FTPD 1.65 Password Overflow

This exploits the buffer overflow found in the PASS command in War-FTPD 1.65. This particular module will only work reliably against Windows 2000 targets. The server must be configured to allow anonymous logins for this exploit to succeed. A failed attempt will bring down the service completely...

CVE-1999-1590

CVE-1999-1590 is a directory traversal vulnerability in Muhammad A. Muquit's Count.cgi (wwwcount) version 2.3. An attacker can read arbitrary GIF files by sending .. in the image parameter, a vulnerability distinct from CVE-1999-0021. Remediation noted in the sources is to upgrade to wwwcount 2.4...