PHP-Nuke v7.4 admin exploit (old exploit)

No description provided by source. / old exploit but what pretty code /str0ke / / phpNUKE v7.4 exploit this exploit create new admin with relative passwd that you specified on parameter of exploit you take administrative control of the webPortal Reverences: http://www.osvdb.org/9563 coded by:...

DLINK 624, script injection vulnerability

TITLE: Security flaw in DLINK 624 - SOHO routers http://www.dlink.com TYPE: Script injection over DHCP QUOTE from DLINK: The D-Link Xtreme G DI-624 wireless router with 108Mbps^ upgrade employs five cutting-edge hardware-based compression technologies to achieve a significant boost in performance...

Cisco WLSE and HSE devices contain hardcoded username and password

Overview A default account with a common username and password exists in two Cisco products. An attacker with knowledge of this account information can compromise any of these devices on the network. Description A default account with a known, fixed username and password combination exists in som...

SMC2804WBR Router Default Password (smcadmin)

The remote host is a SMC2804WBR access point. This host is installed with a default administrator password smcadmin which has not been modified. An attacker may exploit this flaw to gain control over this host using the default password. This script was written by Audun Larsen Changes by Tenable:...

phpBB 2.06 search.php SQL injection

Hello bugtraq readers, A vulnerability exists in phpBB 2.06 that could allow an attacker to manipulate SQL queries and gain administrative control over the forum. The search.php script of the application does not sufficiently sanitize the input of the "searchid" parameter. As a result of this an...

Avaya Argent Office uses weak authentication for TFTP-based administrative control

Overview The Avaya Argent Office contains a weak authentication mechanism for administrative access. Description The Avaya Argent Office uses a TFTP-based mechanism to accept requests for administrative functions. By requesting "files" from the device via its internal interface, administrators ca...

ZH2003-12SA.txt

ZH2003-12SA security advisory: PHP-Gästebuch Ver. 1.60 Beta Published: 23/07/2003 Released: 23/07/2003 Name: PHP-Gästebuch http://www.php-gaestebuch.de Affected Systems: All versions ? Severity: Medium/High Platforms: Windows and Unix Original Advisory:...

ZH2003-11SA (security advisory): Elite News Ver. 1.0.0.0-1.0.0.3 Beta

Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory: http://www.zone-h.org/en/advisories/read/id=2710 Author: Trash-80 -...

ZH2003-11SA.txt

ZH2003-11SA security advisory: Elite News Ver. 1.0.0.0-1.0.0.3 Beta Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory:...

PABox 1.6 - Password Reset

PABox 1.6 - Password Reset source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...

PABox 1.6 - Password Reset

source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...

Desktop Orbiter Unpassworded Access Remote Reboot DoS

The remote host is running a Desktop Orbiter Satellite As this service is unpassworded, an attacker may connect to it to reboot the remote host or take administrative control over it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11713; scriptversion"$Revision: 1.14...

badblue.txt

BadBlue Arbitrary Administrative Actions Vulnerability I. Synopsis Author: Matthew Murphy [email protected] Release Date: April 20, 2003 Vendor References: http://www.badblue.com http://www.badblue.com/down.htm Affected Systems: BadBlue 2.15 and prior Risk: High Issue: A vulnerability enabling...

Mambo Site Server MD5 Hash Session ID Privilege Escalation

The remote installation of Mambo Site Server improperly validates the cookies that are sent back by the user. As a result, a user may impersonate the administrator by using the MD5 value of a received cookie and thereby gain administrative control of the affected application. %NASLMINLEVEL 70300 ...

phpBB Security Bugs

phpBB Security Bugs 2-18-2003 http://CGIshield.com Security Issue in phpBB 2.0,2.01, 2.02 Fixed in 2.03 phpBB, the most popular open source bulletin board software on the net, is vulnerable to a remotely exploitable SQL injection bug which allows stealing an administrator's password hash. With th...

Microsoft Internet Information Server (IIS) contains remote buffer overflow in chunked encoding data transfer mechanism for HTR

Overview A buffer overflow vulnerability in IIS 4.0 and 5.0 could allow an intruder to execute arbitrary code on an IIS server with the privileges of the HTR ISAPI extension. Description Chunked encoding is a means to transfer variable-sized units of data called chunks from a web client to a web...

Advisory CA-2001-10

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-10 Buffer Overflow Vulnerability in Microsoft IIS 5.0 Original release date: May 02, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Microsoft Windows 2000 with...

RealServer /admin/includes/ Remote Memory Content Disclosure

The remote Real Server discloses the content of its memory when issued the request : GET /admin/includes/ This information may be used by an attacker to obtain administrative control on this server, or to gain more knowledge about it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script...