CVE-2019-20029

An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged account, including a...

CVE-2019-20029

CVE-2019-20029 describes an exploitable privilege-escalation in the WebPro functionality of Aspire-derived NEC PBXes, affecting all versions of SV8100, SV9100, SL1100 and SL2100. A specially crafted HTTP POST can elevate privileges to a higher privileged account, including an undocumented develop...

CVE-2019-20027

CVE-2019-20027 affects Aspire-derived NEC PBXes (SV8100, SV9100, SL1100, SL2100) running software 7.0+. If misconfigured, the devices allow a blank username/password pair to be entered as a valid, authenticating account. The vulnerability enables network access with partial confidentiality/integr...

CVE-2019-20027: Improper Authentication

Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid, successfully authenticating account...

aspirelactation.com.au Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145557 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting aspirelactation.com.au website and its users...

Skype v5.6.59.x - Memory Corruption Vulnerability

Title: ====== Skype v5.6.59.x - Memory Corruption Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=315 VL-ID: ===== 315 Introduction: ============= Skype is a software application that allows users to make voice and video calls and...

Skype v5.6.59.x - Memory Corruption Vulnerability

No description provided by source. Title: ====== Skype v5.6.59.x - Memory Corruption Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=315 VL-ID: ===== 315 Introduction: ============= Skype is a software application that allows users t...

Skype v5.6.59.x - Memory Corruption Vulnerability

Document Title: =============== Skype v5.6.59.x - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=315 Release Date: ============= 2012-02-16 Vulnerability Laboratory ID VL-ID: ==================================== 315 Commo...

Skype v5.6.59.x - Memory Corruption Vulnerability

Document Title: =============== Skype v5.6.59.x - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=315 Release Date: ============= 2012-02-16 Vulnerability Laboratory ID VL-ID: ==================================== 315 Commo...

Aspire Technologies SQL Injection

================================================ Exploit Title : Aspire Technologies SQL Injection Vulnerability Google Dork : intext:"Powered by Aspire Technologies" Date : 2011-25-09 Author : nGa Sa Lu GaNgst3r Service Link : http://www.aspiresolutions.info Tested on : Vista Platform : php +...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:032)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a...