Buffer overflow

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file...

ECSHOP website program can bypass the permission to upload the word Trojan horse-vulnerability warning-the black bar safety net

Brief description: You can bypass the permissions to upload the word Trojan Detailed description: ! The front Desk left a note, content is our word on Trojans:? php eval$POSTcmd;?& gt; ! Then in the background the system==Database Management== Data Backup==select custom backup, selecting...

CVE-2012-0306

Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted backup file...

Memory corruption

Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted backup file...

CVE-2012-0306

Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted backup file...

Manhali v1.8 Local File Inclusion Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other...

Thomson Wireless VoIP Cable Modem Authentication Bypass

Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other Vulnerabilities: Unauthenticated Backup File Access, Plaintext Protocol...

Notepad Dog microblogging V3. 6. 1 Build 2 0 A 1 2 0 7 1 8 background to get shell-vulnerability warning-the black bar safety net

Notepad Dog microblogging system, the background presence of design defects that can lead to get backstage access to the shell Version: V3. 6. 1 Build 2 0 a 1 2 0 7 1 8 1. System Tools-data backup-custom backup-select a data amount smaller table-more options-select compress backup...

Easy business v3. 0 code audit-vulnerability warning-the black bar safety net

A gay in a portal to work..site total person-days..so..let us Diamondback help to look at the dish below, do not spray to initiate a dedicated Just a cursory scan of a few eye..pit... ! Simply wood with a filter media OK.. news\install\index. php. bak this turned out also with a dede..although ba...

ManageEngine SupportCenter Plus < 7.9 Build 7905 Multiple Vulnerabilities

The remote host is running a version of ManageEngine SupportCenter Plus less than 7.9 build 7905. Such versions are affected by multiple vulnerabilities: - A SQL injection vulnerability in the 'countSql' parameter of the '/servlet/AJaxServlet' script. - Multiple stored cross-site scripting...

"Unknown vbk format" error when importing backup file to Veeam Backup & Replication

Challenge Cause The .vbk file you are trying to import was created with a different version of Veeam Backup & Replication. Solution Check whether versions of the Veeam Backup & Replication software match on the server where the .vbk file was made and on the server to which you are importing the...

JustHost Hosting Server Compromised, More than 1000's of websites at Risk !

JustHost Hosting Server Compromised, More than1000's of websites at Risk ! JustHost.com Server Breached ! "Just host is one of the fast growing hosting industries with the good uptime reliability with the best support and it's new to the world wide in the year 2008.Just host .com is one of the...

CVE-2010-2603

RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes it easier for local users to decrypt the file via a brute force attack...

DEBIAN-CVE-2010-1161

Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files...

E-Book Store Backup Disclosure

======================================================================================== | Title : E-book Store Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/ebookstore.zip | Tested on: windows SP2...

CDTrustee - '.BAK' Local Crash (PoC)

Exploit Title: CDTrustee .BAK Local Crash POC Date: March 30, 2010 Software Link: http://www.base40.com/cdtDownload.html Version: 2.06 Tested on: WinXP SP3 and Windows 7 Cost: 39.95 USD Author: anonymous Site: http://www.setfreesecurity.com Usage: Install software, run this script it will create...

HTTP Backup File Scanner

This module identifies the existence of possible copies of a specific file in a given path. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Backup File Scanner', 'Description' = %q This...

Gnome Panel 2.28.0 Denial Of Service

Exploit Title: Gnome panel After executing this poc a backup file will be created You can restore it by typing ./paneldos restore Using option restart gnome-panel will restart continuously Using option totalblock you will need to remove the battery After execution click application in the panel,...

CVE-2009-3484

Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file. NOTE: some of these details are obtained from third party information...

CVE-2009-3484

CVE-2009-3484 concerns Core FTP 2.1 build 1612, where a stack-based buffer overflow is triggered by a long hostname in an FTP server entry within a site backup file. This user‑assisted vulnerability could allow an attacker to execute arbitrary code on the affected system. The description explicit...