Lucene search
+L

5333 matches found

securityvulns
securityvulns
added 2007/10/12 12:0 a.m.35 views

CiscoWorks Wireless LAN Solution Engine Cisco Wireless Control System Conversion Utility default password

Conversion utility adds default password...

3.7AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2007/10/12 12:0 a.m.43 views

Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password Advisory ID: cisco-sa-20071010-wcs http://www.cisco.com/warp/public/707/cisco-sa-20071010-wcs.shtml Revision 1.0 For Public Release 2007 October 10 1600 UT...

0.1AI score
SaveExploits0
Cisco
Cisco
added 2007/10/10 4:0 p.m.40 views

Cisco Wireless Control System Conversion Utility Adds Default Password

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

10CVSS6.3AI score0.02566EPSS
SaveExploits0References1
Prion
Prion
added 2007/08/29 1:17 a.m.23 views

Buffer overflow

Multiple buffer overflows in phpiisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iisgetservicestate function, related to the...

7.5CVSS7.8AI score0.09446EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2007/08/29 1:17 a.m.33 views

CVE-2007-4586

Multiple buffer overflows in phpiisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iisgetservicestate function, related to the...

7.5CVSS7.5AI score0.09446EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2007/08/29 1:0 a.m.31 views

CVE-2007-4586

Multiple buffer overflows in phpiisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iisgetservicestate function, related to the...

7.4AI score0.09446EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2007/08/27 12:0 a.m.32 views

php520-local.txt

// Risk: Local Buffer Overflow Medium - High Risk // Notes: Various other functions are exploitable, all of which convert the // string arguments to unicode. // // extern "C" IISFUNCAPI int fnStartServiceLPCTSTR ServiceId; // extern "C" IISFUNCAPI int fnGetServiceStateLPCTSTR ServiceId; // extern...

SaveExploits0
Prion
Prion
added 2007/08/21 12:17 a.m.23 views

Stack overflow

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service application crash via a request for a long .gif filename in the images/ directory, related to conversion from...

5CVSS7.5AI score0.0384EPSS
SaveExploits1References7Affected Software1
myhack58
myhack58
added 2007/07/25 12:0 a.m.17 views

Special proxy software to bypass port easily break limit-vulnerability warning-the black bar safety net

It is well known, the network connection is divided into a Sock, HTTP, FTP, and other types, respectively suitable for different applications. However, sometimes the network is only open 8 0 port for HTTP web browsing. Faced with this situation, we must do nothing? Of course not, in SockOnline th...

6.9AI score
SaveExploits0
CERT
CERT
added 2007/06/26 12:0 a.m.49 views

MIT Kerberos kadmind RPC library gssrpc__svcauth_unix() integer conversion error

Overview The MIT Kerberos administration daemon kadmind contains an integer conversion error vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Description The gssrpcsvcauthunix function used by the Kerberos administration...

8.3CVSS10AI score0.03479EPSS
SaveExploits1References6
Oracle linux
Oracle linux
added 2007/05/17 12:0 a.m.40 views

Moderate: gcc security and bug fix update

3.4.6-8.0.1 - add gcc34-pr23591-tls-model-fix.patch - this patch fixes a bug with exception handlers and threads 3.4.6-8 - add gnu.java.util.ZoneInfo class, use tzdata files for libgcj timezone stuff instead of builtin simple and outdated rules 227884 - add missing @GCC4.0.0 and @GCC4.2.0 libgcc...

2.6CVSS1.2AI score0.03827EPSS
SaveExploits0
myhack58
myhack58
added 2007/03/30 12:0 a.m.22 views

2 0 0 7 the latest IE 0day net horse picture that-the vulnerability warning-the black bar safety net

Ghost boy Note: This something has recently fried very hot, the css calls the two pictures, but it is unclear principle. Reportedly originally sold to 8W, but now it seems like everywhere got. Just in xiaoguang there to see, turn around, and his this added a simple encryption. Source: XG'Blog How...

1AI score
SaveExploits0
myhack58
myhack58
added 2007/03/22 12:0 a.m.25 views

Build not dead asp-Trojan-vulnerability warning-the black bar safety net

Author: black memory This article has been published in the hacker X-Files magazine tenth copyright of the hackers X-Files on all reproduced please specify the copyright Unexpected, a few days ago I discovered that I worked extremely hard to collect the asp Trojan, and actually not a few not to b...

7.1AI score
SaveExploits0
myhack58
myhack58
added 2007/03/02 12:0 a.m.22 views

The script pictures the back door without echo solutions-vulnerability warning-the black bar safety net

First of all, let us think about why the picture of the back door is not back obvious reason: as you know, we use the include contains picture, the interpreter will put the picture as a text document for searching and automatic parsing% %or??& gt;of the script. So what other html characters such...

0.1AI score
SaveExploits0
myhack58
myhack58
added 2007/02/10 12:0 a.m.16 views

Use the phone to control the server-the vulnerabilities and early warning-the black bar safety net

It seems like the title is a bit scary, in fact, is the use of WAP plus WebShell。 Now many phones support WAP Internet access, as long as the slightly modified existing Web Backdoor code can be achieved WAP browser access. Traditional Web backdoors and browser interaction HTML, and WAP browser is...

0.6AI score
SaveExploits0
NVD
NVD
added 2007/01/23 2:28 a.m.18 views

CVE-2006-6948

MyODBC Japanese conversion edition 3.51.06, 2.50.29, and 2.50.25 allows remote attackers to cause a denial of service via a certain string in a response, which has unspecified impact on the MySQL database...

7.8CVSS6.6AI score0.01205EPSS
SaveExploits0References1
CVE
CVE
added 2007/01/23 2:0 a.m.45 views

CVE-2006-6948

The CVE affects MyODBC Japanese Conversion Edition (Windows) versions 3.51.06, 2.50.29, and 2.50.25. A remote attacker can trigger a denial-of-service condition on a vulnerable MySQL server by sending a specific string in a response. The core vulnerability description does not specify the exact r...

7.8CVSS6.9AI score0.01205EPSS
SaveExploits0References1Affected Software1
CERT
CERT
added 2007/01/18 12:0 a.m.32 views

Mozilla products vulnerable to heap overflow via miscalculated size during conversion of an image

Overview A vulnerability exists in Mozilla products that may allow a remote attacker to execute arbitrary code or cause a denial of service. Description Mozilla products contain a vulnerability in the CSS cursor property on Microsoft Windows that may result in a crash when handling malicious...

6.8CVSS7.6AI score0.08349EPSS
SaveExploits0References12
Prion
Prion
added 2007/01/09 9:28 p.m.17 views

Type confusion

Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...

7.8CVSS7AI score0.02159EPSS
SaveExploits0References14Affected Software1
NVD
NVD
added 2007/01/09 9:28 p.m.27 views

CVE-2007-0157

Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...

7.8CVSS6.7AI score0.02159EPSS
SaveExploits0References14
Rows per page
Query Builder