TP-Link IP Camera Hardcoded Credentials / Command Injection

Core Security - Corelabs Advisory http://corelabs.coresecurity.com TP-Link IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: TP-Link IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0318 Advisory URL:...

Debian Security Advisory DSA 2573-1 (radsecproxy)

The remote host is missing an update to radsecproxy announced via advisory DSA 2573-1. OpenVAS Vulnerability Test $Id: deb25731.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2573-1 radsecproxy Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2573-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2573-1 : radsecproxy - SSL certificate verification weakness

Ralf Paffrath reported that Radsecproxy, a RADIUS protocol proxy, mixed up pre- and post-handshake verification of clients. This vulnerability may wrongly accept clients without checking their certificate chain under certain configurations. Raphael Geissert spotted that the fix for CVE-2012-4523...

CVE-2012-2573

CVE-2012-2573 describes multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3. The flaws allow an attacker to inject arbitrary script/HTML through an e-mail message body using several vectors, including: a SCRIPT element; CSS expressions or STYLE attribute; ONLOAD on BODY...

CVE-2012-2573

creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20364 2012-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20579...

Microsoft Office PowerPoint PPT解析堆溢出漏洞（MS10-088）

BUGTRAQ ID: 44628 CVE ID: CVE-2010-2573 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析PPT文件时错误的信任了文件中所定义的值并对这个值执行了一些算术计算，之后用作了循环的计数器。通过修改这个值，攻击者就可以触发整数下溢，最终导致堆溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Office 2004 for Mac Microsoft PowerPoint Viewer 2007 SP2 Microsoft PowerPoint 2003 SP3...

CVE-2010-2573

CVE-2010-2573 is a PowerPoint remote-code-execution vulnerability caused by an integer underflow while parsing PowerPoint files. Affected are Microsoft PowerPoint 2002 SP3, 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac. Microsoft’s MS10-088 security bulletin provides a patch for the vu...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2293386)

This host is missing a critical security update according to Microsoft Bulletin MS10-088. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft PowerPoint Integer Underflow Heap Corruption (MS10-088; CVE-2010-2573)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to an integer underflow in Microsoft PowerPoint that fails to properly parse specially crafted...

MS10-088: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2293386)

The remote Windows host is running a version of Microsoft PowerPoint that is affected by several vulnerabilities : - A buffer overflow exists in the way the application parses the PowerPoint file format, which can be abused to execute arbitrary code if an attacker can trick a user into opening a...

CVE-2009-2573

CVE-2009-2573 describes multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, triggered when magic_quotes_gpc is disabled. The flaw lets remote authenticated users execute arbitrary SQL commands via the (1) user parameter to (a) index.php and (b) rss.php. According to the entry, the CVS...

CVE-2009-2573

creationtimestamp| type| source ---|---|--- 2009-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8586...

CVE-2008-2573

The CVE-2008-2573 issue affects freeSSHd 1.2.1, where a stack-based buffer overflow in SFTP can be triggered by a long directory name in an SSH_FXP_OPENDIR (opendir) request. Exploitation requires remote access with valid authentication and occurs over the network; successful exploitation could a...

CVE-2008-2573

creationtimestamp| type| source ---|---|--- 2008-05-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5709 2008-06-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5751...

CVE-2007-2573

PHPtree 1.3 is affected by CVE-2007-2573 via a remote file inclusion in plugin/HP_DEV/cms2.php, where an attacker can supply a URL in the s_dir parameter to execute arbitrary PHP code. The vulnerability arises from improper handling of the s_dir input, enabling code execution on the server. The a...

CVE-2006-2573

SQL injection vulnerability in index.php in DGBook 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 homepage, 4 address, 5 comment, and 6 ip parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2573

DGBook 1.0 is affected by a SQL injection in index.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject and execute arbitrary SQL via the following parameters: name, email, homepage, address, comment, and ip. The issue stems from unsafe handling of user input...

CVE-2004-2573

CVE-2004-2573: PHP remote file inclusion in phpGroupWare 0.9.14.005 and earlier. The flaw is in tables_update.inc.php, allowing an attacker to execute arbitrary PHP code by supplying an external URL in the appdir parameter. Affected: phpGroupWare versions up to and including 0.9.14.005. Root caus...

CVE-2005-2573

The CVE-2005-2573 issue affects Oracle MySQL Server on Windows (MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta). The mysql_create_function function in sql_udf.cc uses an incomplete blacklist in a directory traversal check, enabling an attacker to include arbitrary files via...