Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

Exploit for hardware platform in category remote exploits ================================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass ================================================================== Original Advisory:...

Xen 3.3 - XenStore Domain Configuration Data Unsafe Storage

Xen 3.3 - XenStore Domain Configuration Data Unsafe Storage source: https://www.securityfocus.com/bid/31499/info Xen is prone to a vulnerability that results in configuration information being stored in a location that is writable by guest domains. UPDATE December 19, 2008: The initial proposed...

CVE-2008-2402

The Admin Server in Sun Java Active Server Pages ASP Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents...

Improper access control

The Admin Server in Sun Java Active Server Pages ASP Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents...

CVE-2008-2402

The Admin Server in Sun Java Active Server Pages ASP Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents...

CVE-2008-2402

CVE-2008-2402 involves Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The Admin Server stores sensitive information under the web root with insufficient access control, allowing remote attackers to read password hashes and configuration data via direct requests for unspecified d...

CVE-2008-2402: Undefined Security Weakness

The Admin Server in Sun Java Active Server Pages ASP Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents...

Cross site scripting

The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service infinite reboot loop via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF;...

CVE-2007-4319

The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service infinite reboot loop via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF;...

CVE-2007-4123: Undefined Security Weakness

The Groupmax SchedulerFacilities management tool in Hitachi Groupmax Groupware Server 07-00-/F through 07-32-/A before 20070731 does not properly manage schedule server configuration data, which might allow attackers to obtain sensitive information via unspecified vectors...

Default configuration

Unspecified vulnerability in Advanced Webhost Billing System AWBS before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors...

CVE-2007-4113

Unspecified vulnerability in Advanced Webhost Billing System AWBS before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors...

CVE-2007-4113

Summary: CVE-2007-4113 affects the Advanced Webhost Billing System (AWBS) prior to version 2.6.0. The vulnerability allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors. The provided documents do not specify the exact attack vector, ...

CVE-2007-4113

Unspecified vulnerability in Advanced Webhost Billing System AWBS before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors...

CVE-2007-4113: Undefined Security Weakness

Unspecified vulnerability in Advanced Webhost Billing System AWBS before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors...

eSoft InstaGate EX2 UTM crossite forgery

It's possible to submit the form with configuration data...

VMware多个拒绝服务漏洞

VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare中存在多个拒绝服务漏洞，具体如下： 1 虚拟机进程（VMX）的ACPI实现在收集有关虚拟机运行状态信息时存在错误，可能导致进程读取无效的内存位置。 2 VMX储存某些畸形配置数据时的错误可能导致guest操作系统拒绝服务。 3 在Windows guest操作系统中处理通用保护错误（GPF）中的漏洞可能导致Windows虚拟机崩溃。 4 在64位主机系统上调试64位Windows guest操作系统中的应用程序时可能导致被破坏的栈指针或内核bugcheck。 VMWar...

VMSA-2007-0004 Multiple Denial-of-Service issues fixed

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2007-0004 Synopsis: Multiple Denial-of-Service issues fixed Issue date: 2007-05-04 Updated on: 2007-05-04 CVE numbers: CVE-2007-1069...

CVE-2007-1914

The RFCSTARTPROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information external RFC server configuration data via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is based upon a vague...