159 matches found
DSquare Exploit Pack: D2SEC_HPEASY2
Name| d2sechpeasy2 ---|--- CVE| CVE-2011-4786 Exploit Pack| D2ExploitPack Description| HP Easy Printer Care XMLCacheMgr Class ActiveX Control Code Execution Vulnerability Notes|...
CVE-2011-4786
HP Easy Printer Care Software 2.5 and earlier contains an ActiveX control (HPTicketMgr.dll) that permits remote code execution. The vulnerability (CVE-2011-4786) arises from the HPTicketMgr.dll ActiveX control and allows an attacker to download and execute an arbitrary program on a client machine...
CVE-2011-3271
Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service device crash via crafted TCP packets to port 4786, aka Bug ID CSCto10165...
Code injection
Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service device crash via crafted TCP packets to port 4786, aka Bug ID CSCto10165...
CVE-2011-3271
Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service device crash via crafted TCP packets to port 4786, aka Bug ID CSCto10165...
Cisco IOS Smart Install远程代码执行漏洞
BUGTRAQ ID: 49828 CVE ID: CVE-2011-3271 Cisco的网际操作系统（IOS）是一个网际互连优化的复杂操作系统。 Cisco IOS的Smart Install功能在实现上存在漏洞，远程非法攻击者可利用此漏洞在受影响设备上执行任意代码。 此漏洞源于运行Cisco IOS Software的Cisco Catalyst Switches中的Smart Install功能，Smart Install使用TCP端口4786进行通信，要触发此漏洞需要完整的TCP三方握手的连接。 Cisco IOS 15.x Cisco IOS 12.x 厂商补丁： Cisco...
Design/Logic Flaw
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...
CVE-2010-4786
CVE-2010-4786 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.63 (6.0.0.8‑TIV‑ITDS‑IF0005). The issue enables a remote authenticated user to cause a denial of service (daemon crash or hang) by performing a paged search, related to an improper ibm-slapdIdleTimeOut configuration. The d...
CVE-2009-4786
Pligg before version 1.0.3 is vulnerable to multiple cross-site scripting (XSS) flaws via the HTTP Referer header in eight endpoints (admin_config.php, admin_modules.php, delete.php, editlink.php, submit.php, submit_groups.php, user_add_remove_links.php, user_settings.php). The issue allows remot...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these issues to steal cookie-based authentication credentials or perform unauthorized actions when masquerading as the victim. Other attacks are also possible...
CVE-2008-4786
CVE-2008-4786 describes an SQL injection vulnerability in the EasyShop plugin for e107, specifically in easyshop.php where the category_id parameter can be exploited to execute arbitrary SQL commands. The vulnerability affects the EasyShop component within e107 and is categorized with a CVSSv2 ba...
CVE-2008-4786
SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...
CVE-2008-4786
creationtimestamp| type| source ---|---|--- 2008-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6852...
CVE-2007-4786
Cisco ASA/PIX: The vulnerability affects ASA versions 7.0–7.0.7.1, 7.1–7.1.2.61, 7.2–7.2.2.34, and 8.0–8.0.2.11 when AAA is enabled. The issue arises from the system composing %ASA-5-111008 messages using the output of the "test aaa" command, which includes cleartext passwords, and sending them t...
CVE-2007-4786
Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...
Moodle < 1.6.2 Multiple Vulnerabilities
The installed version of Moodle fails to sanitize user-supplied input to a number of parameters and scripts. An attacker can leverage these issues to launch SQL injection and cross-site scripting attacks against the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2006-4786
CVE-2006-4786 affects Moodle 1.6.1 and earlier. Remote attackers can obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups, causing partial confidentiality impact. The provided connected sources confirm the vulnerability pattern but do not inc...
CVE-2005-4786
The CVE-2005-4786 issue is a buffer overflow in the ALZ archive decompression in vrAZMain.dll (version 5.8.22.137) used by HAURI antivirus products (ViRobot Expert 4.0, ViRobot Advanced Server, HAURI LiveCall). It can allow user‑assisted attackers to execute arbitrary code by processing an ALZ ar...