Fuji Xerox Printing Systems (FXPS) Print Engine Crafted Request HTTP Authentication Bypass

The remote host appears to be a Fuji Xerox Printing Systems FXPS printer. According to its firmware version, the web server component of the FXPS device reportedly fails to authenticate HTTP requests, which could allow a remote attacker to gain administrative control of the affected printer and...

Brightmail AntiSpam bmagent Multiple Remote Vulnerabilities (DoS, Traversal)

The remote host is running Brightmail AntiSpam, an antispam and anti- virus filter for mail servers, and includes Brightmail Agent, a web server intended to be used by a Brightmail Control Center to manage the Brightmail Scanner. The version of Brightmail Agent installed on the remote host does n...

Microsoft Hyperlink Object Library stack buffer overflow

Overview The Microsoft Windows system library for handling hyperlinks contains a buffer overflow. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. Description Microsoft Hyperlink Object Library HLINK.DLL The Hyperlink Object Library provides interfaces for...

frontpage -- cross site scripting vulnerability

Esteban Martinez Fayo reports: The FrontPage Server Extensions 2002 included in Windows Sever 2003 IIS 6.0 and available as a separate download for Windows 2000 and XP has a web page /vtibin/vtiadm/fpadmdll.dll that is used for administrative purposes. This web page is vulnerable to cross site...

Cisco Intrusion Prevention System privilege escalation

Users with OPERATOR or VIEWER privileges can gain full administrative control...

PHP-Nuke v7.4 admin exploit (old exploit)

Exploit for unknown platform in category web applications ========================================= PHP-Nuke v7.4 admin exploit old exploit ========================================= / old exploit but what pretty code /str0ke / / phpNUKE v7.4 exploit this exploit create new admin with relative...

PHP-Nuke v7.4 admin exploit (old exploit)

No description provided by source. / old exploit but what pretty code /str0ke / / phpNUKE v7.4 exploit this exploit create new admin with relative passwd that you specified on parameter of exploit you take administrative control of the webPortal Reverences: http://www.osvdb.org/9563 coded by:...

PHP-Nuke 7.4 - Admin

PHP-Nuke 7.4 - Admin / old exploit but what pretty code /str0ke / / phpNUKE v7.4 exploit this exploit create new admin with relative passwd that you specified on parameter of exploit you take administrative control of the webPortal Reverences: http://www.osvdb.org/9563 coded by: Silentium of...

DLINK 624, script injection vulnerability

TITLE: Security flaw in DLINK 624 - SOHO routers http://www.dlink.com TYPE: Script injection over DHCP QUOTE from DLINK: The D-Link Xtreme G DI-624 wireless router with 108Mbps^ upgrade employs five cutting-edge hardware-based compression technologies to achieve a significant boost in performance...

Cisco WLSE and HSE devices contain hardcoded username and password

Overview A default account with a common username and password exists in two Cisco products. An attacker with knowledge of this account information can compromise any of these devices on the network. Description A default account with a known, fixed username and password combination exists in som...

SMC2804WBR Router Default Password (smcadmin)

The remote host is a SMC2804WBR access point. This host is installed with a default administrator password smcadmin which has not been modified. An attacker may exploit this flaw to gain control over this host using the default password. This script was written by Audun Larsen Changes by Tenable:...

phpBB 2.06 search.php SQL injection

Hello bugtraq readers, A vulnerability exists in phpBB 2.06 that could allow an attacker to manipulate SQL queries and gain administrative control over the forum. The search.php script of the application does not sufficiently sanitize the input of the "searchid" parameter. As a result of this an...

Avaya Argent Office uses weak authentication for TFTP-based administrative control

Overview The Avaya Argent Office contains a weak authentication mechanism for administrative access. Description The Avaya Argent Office uses a TFTP-based mechanism to accept requests for administrative functions. By requesting "files" from the device via its internal interface, administrators ca...

ZH2003-12SA.txt

ZH2003-12SA security advisory: PHP-Gästebuch Ver. 1.60 Beta Published: 23/07/2003 Released: 23/07/2003 Name: PHP-Gästebuch http://www.php-gaestebuch.de Affected Systems: All versions ? Severity: Medium/High Platforms: Windows and Unix Original Advisory:...

ZH2003-11SA (security advisory): Elite News Ver. 1.0.0.0-1.0.0.3 Beta

Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory: http://www.zone-h.org/en/advisories/read/id=2710 Author: Trash-80 -...

ZH2003-11SA.txt

ZH2003-11SA security advisory: Elite News Ver. 1.0.0.0-1.0.0.3 Beta Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory:...

PABox 1.6 - Password Reset

PABox 1.6 - Password Reset source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...

PABox 1.6 - Password Reset

source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...

Desktop Orbiter Unpassworded Access Remote Reboot DoS

The remote host is running a Desktop Orbiter Satellite As this service is unpassworded, an attacker may connect to it to reboot the remote host or take administrative control over it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11713; scriptversion"$Revision: 1.14...

badblue.txt

BadBlue Arbitrary Administrative Actions Vulnerability I. Synopsis Author: Matthew Murphy [email protected] Release Date: April 20, 2003 Vendor References: http://www.badblue.com http://www.badblue.com/down.htm Affected Systems: BadBlue 2.15 and prior Risk: High Issue: A vulnerability enabling...