CVE-2015-6949

The CVE-2015-6949 issue affects the ASUS TM-AC1900 router. A stack-based buffer overflow in the HTTP header parsing routine allows remote attackers to execute arbitrary code by sending crafted HTTP header values, potentially yielding root-privileged code execution. Public references (e.g., NVD en...

CVE-2014-6949

The CVE-2014-6949 entry concerns the Android app Akne Ernahrung (package com.rareartifact.akneernahrung72010074) 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in TLS/SSL, enabling MITM attackers to spoof servers and obtain sensitive inf...

CVE-2013-6949

CVE-2013-6949 concerns Belkin Wemo Home Automation devices: the firmware before 3949 does not properly use STUN/TURN, enabling a remote attacker who controls one device to relay connections to other Wemo devices. The impact is described as hijacking connections with potential further impact; expl...

Munin Resource Monitoring Traffic Detection (nooutput)

Binary data 6949.prm...

CVE-2008-6949

Multiple cross-site request forgery CSRF vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that 1 submit or edit a new project, or 2 upload files to a project, or 3 attach files to messages via unknown vectors. NOTE: these issue...

CVE-2008-6949

CVE-2008-6949 affects Collabtive 0.4.8 with multiple CSRF vulnerabilities that let an attacker hijack administrator authentication to perform actions such as submitting or editing a project, uploading files to a project, or attaching files to messages. The issues may be leveraged with other vulne...

CVE-2008-6949

creationtimestamp| type| source ---|---|--- 2008-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7076...

CVE-2006-6949

Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2006-6949

CVE-2006-6949 affects Conti FTPServer 1.0 Build 2.8, where user passwords are stored in cleartext in MyServerSettings.ini. Local users can read this file to obtain sensitive credentials, enabling partial information disclosure. The vulnerability stems from storing passwords in plaintext in a conf...