PHP Volunteer Management System v1.0.2 Arbitrary File Upload

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Splunk Search Remote Code Execution

This module abuses a command execution vulnerability in the web based interface of Splunk 4.2 to 4.2.4. The vulnerability exists in the 'mappy' search command which allows attackers to run Python code. To exploit this vulnerability, a valid Splunk user with the admin role is required. By default,...

Default credentials

The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a 1 username or 2 password via unspecified vectors...

Samsung G3210 Default Login / Password

Hi @all, the Samsung G3210 and probably other versions also, offers a FTP-Server with the default user "ftpuser" and passwort "ftpuser". After login to the router it's possible to change in various directory e.g "/tmp. Now you can easyly download the configuration of the router. The file...

CVE-2004-2298

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

CVE-2004-2298: Undefined Security Weakness

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

[SA13377] Novell NetMail Default NMAP Authentication Credential Security Issue

TITLE: Novell NetMail Default NMAP Authentication Credential Security Issue SECUNIA ADVISORY ID: SA13377 VERIFY ADVISORY: http://secunia.com/advisories/13377/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of system information, Exposure of sensitive information WHERE: From local...

Cisco Security Advisory: A default Username and Password in WLSE and HSE devices

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is a re-release of the Advisory. In the previous Advisory release, it was incorrectly stated that the fix for this vulnerability is a configuration change. That has now been corrected. We apologize for any inconvenience, Cisco PSIRT - ------- Cis...