CVE-2013-3055: Undefined Security Weakness

Lexmark Markvision Enterprise before 1.8 provides a diagnostic interface on TCP port 9789, which allows remote attackers to execute arbitrary code, change the configuration, or obtain sensitive fleet-management information via unspecified vectors...

CVE-2013-1170

The Cisco Prime Network Control System NCS appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service service disruption via unspecified vectors, aka Bug ID...

CVE-2013-1170: Undefined Security Weakness

The Cisco Prime Network Control System NCS appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service service disruption via unspecified vectors, aka Bug ID...

dhcp: reduced expiration time of an IPv6 lease may cause dhcpd to crash

A flaw was found in the way the dhcpd daemon handled the expiration time of IPv6 leases. If dhcpd's configuration was changed to reduce the default IPv6 lease time, lease renewal requests for previously assigned leases could cause dhcpd to crash...

PT-2013-3150 · Cubecart · Cubecart

Name of the Vulnerable Software and Affected Versions: CubeCart versions 5.0.0 through 5.2.0 Description: The issue allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter. This can be used to modify the application configuration using the Config object...

CVE-2012-6439: Improper Access Control

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS condition can occur. This situation could cause loss of...

XSS, Redirector and CSRF vulnerabilities in WordPress

Hello 3APA3A! After seven previous vulnerabilities in Akismet, here are new holes. They take place in plugin Akismet for WordPress and it's core-plugin since version WP 2.0, so these vulnerabilities concern WordPress itself. This is the second in series of advisories concerning vulnerabilities in...

Linksys WRT54GL Wireless Router - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53427/info The Linksys WRT54GL router is prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service conditions, or inject...

InspIRCd heap corruption vulnerability

Overview InspIRCd 2.0.5 and possibly other versions contain a heap corruption vulnerability that may be exploited with a specifically crafted DNS query. Description InspIRCd contains a heap corruption vulnerability that exists in the dns.cpp code. The res buffer is allocated on the heap and can b...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

CVE-2010-3024: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in user/main/updateuser in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

CVE-2010-0596: Undefined Security Weakness

Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain...

USN-911-1: MoinMoin vulnerabilities

It was discovered that several wiki actions and preference settings in MoinMoin were not protected from cross-site request forgery CSRF. If an authenticated user were tricked into visiting a malicious website while logged into MoinMoin, a remote attacker could change the user's configuration or...

Huawei HG510 - Multiple Cross-Site Request Forgery Vulnerabilities

Huawei HG510 - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/38261/info Huawei HG510 is prone to multiple cross-site request-forgery vulnerabilities. Successful exploits may allow attackers to run privileged commands on the affected device, change...

Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS XSRF

No description provided by source. Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: = 21.0.8.3 and may be higher =25.1.0.0 Tested on: relevant os Code : exploit code From: DSecRG research dsecr...

Fedora 10 : perl-5.10.0-73.fc10 (2009-7680)

This security update fixes an off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Moreover, it contains a subtle change to the configuration that does not affect the Perl interpreter itself, but fixes the propagation of the chosen options to the modules. For example, a rebuild of perl-Wx...

HP-UX Update for the Ignite-UX or the DynRootDisk (DRD) get_system_info Command HPSBUX02249

Check for the Version of the Ignite-UX or the DynRootDisk DRD getsysteminfo Command OpenVAS Vulnerability Test HP-UX Update for the Ignite-UX or the DynRootDisk DRD getsysteminfo Command HPSBUX02249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

HP-UX Update for the Ignite-UX or the DynRootDisk (DRD) get_system_info Command HPSBUX02249

Check for the Version of the Ignite-UX or the DynRootDisk DRD getsysteminfo Command OpenVAS Vulnerability Test HP-UX Update for the Ignite-UX or the DynRootDisk DRD getsysteminfo Command HPSBUX02249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

JVN#66828183 MODx cross-site request forgery vulnerability

MODx, an open source contents management system, contains a cross-site request forgery vulnerability. Impact A remote attacker may modify contents managed by MODx if the user views a malicious web page while logged in to MODx. Solution Update the software and change the configuration Apply the...

CVE-2008-5382

Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...