389 matches found
Linux Botnet Discovered
From The H Security A network of hijacked Linux servers is apparently being used to distribute malicious software to Windows PCs. According to an analysis by web developer Denis Sinegubko, the comprised systems all have one thing in common: the light weight web server nginx is running and serving...
Ubuntu USN-808-1 (bind9)
The remote host is missing an update to bind9 announced via advisory USN-808-1. OpenVAS Vulnerability Test $Id: ubuntu8081.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8081.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-808-1 bind9 Authors: Thomas...
No routing password permissions when the Dove on-line method-vulnerability warning-the black bar safety net
No routing password permissions when the pigeons on the line method: The first step:tools--FTP--FTP home directory, just in the desktop build one, put the following ports into 2 1. The user name can not fill. The following two options are marked with a tick. Then turn on the service. Completed th...
Debian: Security Advisory (DSA-1686-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for 1 WAN.html, 2 wzPPPOE.html, and 3 rpDyDNS.html, and then reading the HTML source...
CVE-2008-1524
The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...
CVE-2008-1524
The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...
CVE-2008-1523
ZyXEL Prestige routers P-660, P-661, and P-662 with firmware 3.40(AGD.2)–3.40(AHQ.3) expose a vulnerability where remote authenticated users can read HTML source by directly requesting WAN.html, wzPPPOE.html, and rpDyDNS.html, potentially obtaining ISP and Dynamic DNS credentials. This is documen...
CVE-2008-1523
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for 1 WAN.html, 2 wzPPPOE.html, and 3 rpDyDNS.html, and then reading the HTML source...
ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
This paper is the result of various security assessments performed on several ZyXEL Prestige devices in both, a controlled environment computer lab and production environments during several penetration tests. There are two types of attacks featured in this paper which we believe might be...
Debian: Security Advisory (DSA-592-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
2WIRE Routers - Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password NUEVOPASS:...
2wire-csrf.txt
Cross Site Request Forgery in 2wire routers Vulnerable Routers: 1701HG, 2071 Gateway Software: v3.17.5, 5.29.51 Password Not Set default Greetz a la Comunidad Underground de México, y a los que me ayudaron a probarlo: Preth00nker, nitr0us, ... [email protected] I. Background ------------- This is the...
MyDNS buffer overflow
Heap buffer overflow on dynamic DNS update request parsing...
MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2
Exploit for unknown platform in category remote exploits =============================================================== MS Windows DNS RPC Remote Buffer Overflow Exploit port 445 v2 =============================================================== Exploit v2 features: - Target Remote port 445 by...
CVE-2007-1644
The CVE-2007-1644 entry concerns the dynamic DNS update mechanism in the Microsoft Windows DNS Server. The issue is that the DNS server’s dynamic update process does not properly authenticate clients in certain deployments/configurations, enabling a remote attacker to modify DNS records for a web...
Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit
Exploit for unknown platform in category remote exploits ========================================================= Microsoft DNS Server Dynamic DNS Updates Remote Exploit ========================================================= / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres...
Microsoft DNS Server - Dynamic DNS UpdateChange
Microsoft DNS Server - Dynamic DNS UpdateChange / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres Tarasco Acuña - c 2007 Url: http://www.514.es By default, most Microsoft DNS servers integrated with active directory allow insecure dynamic updates for dns records. This feature...
