60 matches found
Sub7
Sub7 SubSeven was a backdoor program or R.A.T. remote administration tool written in Delphi by mobman, that allowed others to gain full access to Windows 9X systems through a network connection. This is the source code to Sub7 2.1.2 , and released April 2000 right before the malicious HDDKiller...
CVE-2000-0979
CVE-2000-0979 CVE-2000-0979.rb — это автономный инструмент для эксплуатации CVE-2000-0979 против службы SMB Windows 95. msf20000979.rb — это модуль Metasploit. Вы можете скопировать его в metasploit-framework ▸ modules ▸ auxiliary ▸ scanner ▸ smb Более подробная документация появится в...
...[ More ]
This Metasploit module exploits CVE-2000-0979, an information disclosure vulnerability in the share-level password authentication of Microsoft Windows 9x/Me SMB servers. The server validates passwords one character at a time, allowing an attacker to enumerate the correct password byte-by-byte bas...
EUVD-2020-12659
Malware in sbrugna...
CVE-2020-1833
Honor 9X smartphones with versions earlier than 9.1.1.172C00E170R8P1 have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the...
CVE-2020-1833
Honor 9X smartphones with versions earlier than 9.1.1.172C00E170R8P1 have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the...
CVE-2020-1833
Honor 9X smartphones with versions earlier than 9.1.1.172C00E170R8P1 have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the...
Authentication flaw
Honor 9X smartphones with versions earlier than 9.1.1.172C00E170R8P1 have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the...
CVE-2020-1833
Honor 9X smartphones with versions earlier than 9.1.1.172C00E170R8P1 have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the...
CVE-2020-1833
CVE-2020-1833 affects Huawei/Honor 9X smartphones with versions earlier than 9.1.1.172 (C00E170R8P1). A logic error in the clock handling logic allows an attacker to access clock information without unlocking the phone after performing a sequence of crafted operations before unlock. Impact is lim...
PT-2020-15108
Name of the Vulnerable Software and Affected Versions Honor 9X versions earlier than 9.1.1.172C00E170R8P1 Description The issue is related to an improper authentication vulnerability. It involves a logic error when handling the clock function. An attacker can exploit this by performing a series o...
CVE-2020-1833: Improper Authentication
Honor 9X smartphones with versions earlier than 9.1.1.172C00E170R8P1 have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the...
Huawei Honor 9X License Issue Vulnerability
Huawei Honor 9X is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in the handling of the Alarm Clock feature in previous versions of Huawei Honor 9X 9.1.1.172 C00E170R8P1. An attacker can exploit the vulnerability with the help of a specially crafted...
Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Open Source MySQL MySQL Vulnerabilities (CVE-2016-6663)
Summary MySQL could allow a local authenticated attacker to gain elevated privileges on the system, caused by a race condition error while setting stats during MyISAM table repair. An attacker could exploit this vulnerability to change permissions of arbitrary files. IBM Security Guardium Databas...
Security Bulletin: Query Parameter in SSL Request vulnerability affects IBM Security Guardium (CVE-2016-0248)
Summary IBM Security Guardium transmits query parameters in SSL requests, that could be intercepted by a remote attacker using man in the middle techniques Vulnerability Details CVEID: CVE-2016-0248 DESCRIPTION: IBM Security Guardium transmits query parameters in SSL requests, that could be...
Qbik WinGate Standard <= 3.0.5 Log Service Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/507/info The WinGate log service is configured by default to only allow connections from 127.0.0.1, but can be set to allow connections from anywhere. Either way, there is a vulnerability that will allow any file to be re...
ElectroSoft ElectroComm 1.0/2.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2706/info ElectroComm is a telnet-comm port server for Windows 9x/NT, allowing users to connect a PC's comm port to a TCP/IP network and login remotely using Telnet. An attacker can execute a denial of service attack on...
Microsoft Outlook 97/98/2000/4/5 Address Book Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by...
Panda Security 3.0 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/1119/info Panda Security is a user management application for Windows 9x. With it, certain functions can be prohibited for specific users. One of the restrictive policies possible is to disable registry editing. However,...
Microsoft Windows 9x / Me Share Level Password Bypass Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment. It...