CVE-2011-0354

The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method...

CVE-2011-0354: Undefined Security Weakness

The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method...

PT-2011-2291

Name of the Vulnerable Software and Affected Versions Cisco Tandberg C Series Endpoints versions prior to TC4.0.0 Cisco Tandberg E and EX Personal Video units versions prior to TC4.0.0 Description The issue concerns a default configuration that sets a blank password for the root account, making i...

Tandberg E, EX and C Series Endpoints Default Credentials

Exploit for hardware platform in category remote exploits -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints Advisory ID: cisco-sa-20110202-tandberg Revision 1.0 For Public Release 2011 February 2...

PT-2011-1389

Name of the Vulnerable Software and Affected Versions NetWin Surgemail versions prior to 4.3g Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the username ex parameter to the surgeweb program. This enables attackers to execute...

CVE-2010-3547

CVE-2010-3547 affects PeopleSoft FMS ESA - EX in Oracle PeopleSoft/JD Edwards Suite, specifically 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6. The vulnerability allows remote authenticated users to compromise confidentiality and integrity via unknown vectors. The Oracle October 2010 Critica...

CVE-2010-3547: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft FMS ESA - EX component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

NSOADV-2010-005: SonicWALL E-Class SSL-VPN ActiveX Control format string overflow

-------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...

Unreal Engine - ReceivedRawBunch() Denial of Service

Unreal Engine - ReceivedRawBunch Denial of Service source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games whic...

Unreal Engine - 'ReceivedRawBunch()' Denial of Service

source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...

Tech-ex v6. 5 CMS Oday-vulnerability warning-the black bar safety net

Background: writing website kesion directory such as http://localhost cookies: after login to grab the USER's COOKIES Account password: after registration you can log in as normal user name and password Code: the login code, grab the figure after the fill The operation,first enter the site,first...

DEBIAN-CVE-2009-4355

Memory leak in the zlibstatefulfinish function in crypto/comp/czlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service memory consumption via vectors that trigger incorrect calls to the CRYPTOcleanupallexdata function, as demonstrate...

Drumbeat CMS 1.0 SQL Injection

Vendor: http://www.drumbeatcms.com.au/ Version: Version 1.0 Tested on: Windows and Linux ----------------------------------------- Drumbeat CMS SQL Injection Exploit + Discovered and notified by Sora A SQL injection exploit is found in Drumbeat CMS. The vulnerability exists in where there is an...

Ex-Workers Indicted for Hacking Company Database

Federal authorities on Wednesday filed intrusion charges against two men accused of accessing the computer systems of their former employer. Scott R. Burgess, 45, of Jasper, Indiana, and Walter D. Puckett, 39, of Williamstown, Kentucky, both worked as managers for Indiana-based Stens Corporation...

KesionCMS(section news)upload vulnerability-vulnerability warning-the black bar safety net

Prius special A bit tasteless,with a few days before the publication of the iis6 filename parsing vulnerability achieve to obtain webshell. First find the use of tech-ex systems site,registered members,and then input KSeditor/selectupfiles. asp, Open after upload x. asp;x. jpg format image file,i...

Ordinary users by udev vulnerability to elevate to root permissions demo-vulnerability warning-the black bar safety net

Recently exposed by the udev permissions hint of vulnerability, as long as with normal user permissions, you can elevate to root privileges, the experiment a handful, really easy to upgrade. Put the following code saved as test. sh file !/ bin/sh Linux 2.6 bug found by Sebastian Krahmer lame splo...

Solaris Update for vi and ex 120830-06

Check for the Version of vi and ex OpenVAS Vulnerability Test Solaris Update for vi and ex 120830-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Solaris Update for edit, ex, vedit, vi and view 113031-04

Check for the Version of edit, ex, vedit, vi and view OpenVAS Vulnerability Test Solaris Update for edit, ex, vedit, vi and view 113031-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for edit, ex, vedit, vi and view 110903-08

Check for the Version of edit, ex, vedit, vi and view OpenVAS Vulnerability Test Solaris Update for edit, ex, vedit, vi and view 110903-08 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for vi and ex 120831-06

Check for the Version of vi and ex OpenVAS Vulnerability Test Solaris Update for vi and ex 120831-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...