phone-sqlxss.txt

In a previous post http://seclists.org/fulldisclosure/2007/Oct/0174.html , we have seen how XSS injection can be performed over SIP to inject malicious JavaScript into the browser of an user that check the call history of his phone. In this post, we will detail how XSS injection can be performed...

CVE-2003-1442: Improper Authentication

The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side...

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities http://update.peopleaggregator.org/dist/peopleaggregator-1.2pre6-release-53.tar.gz DORK : "copyright 2006 Broadband Mechanics" POC :...

Cisco Unified Communications unaurhoized access

Any active directory user has access to web administration tools...

CVE-2003-1363

The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port 9999, which allows remote attackers to mount brute force attacks on the administration console without detection...

CVE-2003-1363: Undefined Security Weakness

The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port 9999, which allows remote attackers to mount brute force attacks on the administration console without detection...

3 3 8 9 get the broiler after the command complete works-vulnerability warning-the black bar safety net

net use $"\\ip\ipc$ "" /user:" " establishment of IPC air link net use $"\\ip\ipc$ "password" /user:"user name" to establish IPC non-empty link net use h: $"\\ip\c$ "password" /user:"username" directly after landing mapping each other C: to the local as H: net use h: $"\\ip\c$ after landing...

3Com WIFI router remote administration vulnerability.

3Com 3CRWER100-75 is a wireless cable/DSL router widely used here, in israel. The router has a web management interface in it's port 80 available from inside the network. When the administrator assign a virtual server to port 80 In the management web filled under the firewall tab and the line is...

CVE-2004-2729

Technical details about CVE-2004-2729 are not publicly available in the provided documents. Monitor for updates from official advisories for affected versions and impact.

CVE-2004-2729

Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections...

CVE-2004-2729: Undefined Security Weakness

Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections...

CVE-2004-2690

CVE-2004-2690 concerns an unrestricted file upload vulnerability in the NewsPHP Administration Panel. The issue permits remote authenticated administrators to upload and execute arbitrary code instead of video files, indicating a flaw in how uploaded content is validated and handled by the panel....

CVE-2004-2690

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files...

CVE-2004-2690: Undefined Security Weakness

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files...

SWAT Unauthenticated Access (Demo Mode)

The remote host is running SWAT, the Samba Web Administration Tool. The remote SWAT server appears to be running in demo mode. In demo mode, authentication is disabled and anyone can use SWAT to modify Samba's configuration file. Demo mode should not be used on a production server. %NASLMINLEVEL...

simpgb14602-xss.txt

netVigilance Security Advisory 67 SimpGB version 1.46.02 Multiple XSS Attack Vulnerabilities Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multiple...

simpgb14602-disclose.txt

netVigilance Security Advisory 65 SimpGB version 1.46.02 File Content Disclosure Vulnerability Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multiple...

SimpGB version 1.46.02 File Content Disclosure Vulnerability

netVigilance Security Advisory 65 SimpGB version 1.46.02 File Content Disclosure Vulnerability Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multiple...

SimpGB version 1.46.02 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 64 SimpGB version 1.46.02 Multiple Path Disclosure Vulnerabilities Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multip...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog scre...