CVE-2013-6129

CVE-2013-6129 affects vBulletin 4.1 and 5. The install/upgrade.php component allows remote attackers to create administrative accounts by submitting crafted POST fields (customerid, htmldata[password], htmldata[confirmpassword], htmldata[email]); this was exploited in the wild in October 2013. Co...

CVE-2013-6129

creationtimestamp| type| source ---|---|--- 2013-10-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38785 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/vbulletinupgradeadmin.rb 2025-02-06 03:13:41+00:00|...

vBulletin Administrator Account Creation

This module abuses the "install/upgrade.php" component on vBulletin 4.1+ and 4.5+ to create a new administrator account, as exploited in the wild on October 2013. This module has been tested successfully on vBulletin 4.1.5 and 4.1.0. Module Options msf use...

CVE-2012-6129

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

CVE-2012-6129

CVE-2012-6129 is a stack-based buffer overflow in utp.cpp of libutp, affecting Transmission (and related products) prior to version 2.74. The vulnerability allows a remote attacker to crash the application (DoS) and potentially execute arbitrary code by sending crafted micro-transport protocol pa...

[USN-1747-1] Transmission vulnerability

========================================================================== Ubuntu Security Notice USN-1747-1 February 25, 2013 transmission vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

Ubuntu: Security Advisory (USN-1747-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6129

CVE-2008-6129 affects moziloWiki 1.0.1 and earlier. A directory-traversal in print.php allows remote attackers to read arbitrary files by providing .. in the page parameter. The NVD entry lists a MEDIUM base score (4.3) with network attack vector and partial confidentiality impact, but exploitati...

CVE-2007-6129

CVE-2007-6129 affects Amber Script 1.0, where a directory traversal flaw in scripts/include/show_content.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the id parameter. In some environments, this can enable remote file inclusion via UNC share paths ...

CVE-2006-6129

Integer overflow in the fatfilegetarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly execute arbitrary code via a crafted Mach-O Universal program that triggers memory corruption...

CVE-2006-6129

CVE-2006-6129 concerns Apple Mac OS X. The issue is an integer overflow in the fatfile_getarch2 routine when loading Universal Mach-O binaries, which can allow a local user to cause a denial of service and, per description, possibly execute arbitrary code through memory corruption. Connected sour...

DameWare Mini Remote Control 4.0 4.9 - Client Agent Remote Overflow

DameWare Mini Remote Control 4.0 4.9 - Client Agent Remote Overflow / / / / / / / / \ / / // / / / / // // / / / .// //// ///====================== DameWare Mini Remote Control Client Agent Service Another Pre-Authentication Buffer Overflow By Jackson Pollocks No5 www.jpno5.com Summary...

CVE-2003-1030

Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129...

CVE-2003-1030

Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129...

CVE-2003-1030

DameWare Mini Remote Control is affected by a pre-authentication buffer overflow in the service listening on TCP 6129, allowing remote code execution. The issue affects versions before 3.73; remediation is to upgrade to 3.73.0.0 or later. The connected Nessus data confirms remote exploitation via...

DameWare Mini Remote Control vulnerable to buffer overflow via specially crafted packets

Overview DameWare Mini Remote Control is a lightweight remote control intended primarily for administrators and help desks for management of desktop systems. A vulnerability in DameWare Mini Remote Control may permit an unauthenticated attacker to execute arbitrary code on the system. Description...

DameWare Mini Remote Control Server <= 3.72 Buffer Overflow

Product: DameWare Mini Remote Control = 3.72.0.0 Vulnerability: Pre-Authentication Buffer Overflow Severity: High Risk Status: Vendor responded very quickly and has resolved the issue in 3.73 and later. The new version can be downloaded from http://www.dameware.com/downloads. Description: A buffe...