Ubuntu: Security Advisory (USN-612-8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS00-094 Microsoft IIS Phone Book Service Overflow

This is an exploit for the Phone Book Service /pbserver/pbserver.dll described in MS00-094. By sending an overly long URL argument for phone book updates, it is possible to overwrite the stack. This module has only been tested against Windows 2000 SP1. This module requires Metasploit:...

Debian generated SSH-Keys working exploit

Hi Securityfocus, the debian openssl issue leads that there are only 65.536 possible ssh keys generated, cause the only entropy is the pid of the process generating the key. This leads to that the following perl script can be used with the precalculated ssh keys to brute force the ssh login. It...

CVE-2008-2048

The documents confirm a Cross-site scripting (XSS) vulnerability in Angelo-Emlak 1.0, specifically in hpz/admin/Default.asp, exploitable via the sayfa parameter. This affects Angelo-Emlak 1.0 and allows remote attackers to inject arbitrary web script or HTML. The root cause is an XSS flaw in the ...

CVE-2007-2048

CVE-2007-2048 affects webMethods Glue prior to and including 6.5.1, specifically the Management Console’s /console. The vulnerability arises from insufficient validation of the resource parameter, allowing a directory traversal via .. to read arbitrary server files. Impact is reading sensitive fi...

CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) SQL Injection

Exploit for unknown platform in category web applications ============================================================ CLUB-Nuke XP 2.0 LCID 2048 Turkish Version SQL Injection ============================================================ CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection...

CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection

CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection Vulnerability Risk : High Credit : ASIANEAGLE Contact: [email protected] Web : www.asianeagle.org Download Link : http://www.aspindir.com/Kategoriler/asp/portal-&-hazir-site/?P=7&K=&T= Exploit: Note : User Logins Must Be Enabled By Admi...

CVE-2006-2048

CVE-2006-2048 concerns PHPWebFTP (Edwin van Wijk) version 2.3 with potential 3.2, describing multiple XSS in index.php. The vulnerability allows remote attackers to inject arbitrary web script/HTML via the (1) port, (2) server, and (3) user parameters. NVD metrics show a CVSS v2 base score of 4.3...

CVE-2002-2048

PFinger 0.7.8 client is affected by a buffer overflow when processing long query values in the finger, -l, -d, or -t options. The issue permits remote code execution if the vulnerable binary is setuid/setgid; otherwise privilege boundaries may not be crossed. Affected component is PFinger 0.7.8 c...

CVE-2005-2048

Summary (CVE-2005-2048): DUforum 3.1 (DUware) is affected by multiple SQL injection vulnerabilities due to improper input sanitization. The exploitable parameters are (1) iMsg in messages.asp, (2) iFor in post.asp, (3) iFor in forums.asp, and (4) id in userEdit.asp. This allows remote attackers t...

CVE-2004-2048

radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access...

CVE-2004-2048

The CVE-2004-2048 entry concerns eSeSIX Thintune Thin Client devices. A radmin service starts a process on port 25072 in firmware 2.4.38 and earlier, which can be accessed using the default password “jstwo,” enabling remote attackers to gain complete access. Related OpenVAS data corroborates a ba...

CVE-2004-2048

radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access...

CVE-2002-2048

Buffer overflow in PFinger 0.7.8 client allows remote attackers to execute arbitrary code via a long query value passed to the 1 finger program, 2 -l, 3 -d, and 4 -t options. NOTE: if PFinger is not setuid or setgid, then this issue would not cross privilege boundaries and would not be considered...