8998 matches found
Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use
Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use source: https://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in...
Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use
source: https://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in MAILTO which could allow an attacker to send emails through a...
Microsoft Outlook Web Access (OWA) Anonymous Access
It is possible to browse the information of the OWA server by accessing as an anonymous user with the following URL: http://www.example.com/exchange/root.asp?acs=anon After this access, the anonymous user can search for valid users in the OWA server and can enumerate all users by accessing the...
CVE-2001-0563
ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large 160000 character strings sent to port 23...
Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String
Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String source: https://www.securityfocus.com/bid/2802/info Olicom routers were previously manufactured and distributed by Olicom, a company now owned by Intel. Olicom routers provide a low-cost routing solution for small businesses. A problem...
Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String
source: https://www.securityfocus.com/bid/2802/info Olicom routers were previously manufactured and distributed by Olicom, a company now owned by Intel. Olicom routers provide a low-cost routing solution for small businesses. A problem with Olicom routers could allow unauthorized access to certai...
Microsoft Windows Messenger Service Social Engineering Weakness
The messenger service is running. This service allows NT users to send pop-up messages to each other. This service can be abused by anyone who can trick valid users into doing some actions that may harm their accounts or your network social engineering attack. C Tenable Network Security, Inc...
Microsoft Windows Alerter Service Social Engineering Weakness
The alerter service is running. This service allows NT users to send pop-up messages to each other. This service can be abused by an attacker who can trick valid users into doing some actions that may harm their accounts or your network social engineering attack C Tenable Network Security, Inc...
Microsoft Windows 95/98 - NetBIOS NULL Name
// source: https://www.securityfocus.com/bid/1163/info Unpredictable results, including system crashes, lock-ups, reboots, and loss of network connectivity, can occur in Windows 95/98 if a NetBIOS session packet is received with the source host name set to NULL. / www.el8.org www.wiretrip.net / /...
Phorum 3.0.7 - violation.php3 Arbitrary Email Relay
Phorum 3.0.7 - violation.php3 Arbitrary Email Relay source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin...
CVE-1999-0181
The CVE-1999-0181 entry concerns the wall daemon, described across connected sources as enabling denial of service, social engineering attacks, or remote command execution. No concrete product versions or patch details are provided in the documents. Red Hat and CVE listings reiterate the same des...
CVE-1999-0181
The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands...
HP JetDirect rev. G.08.xrev. H.08.xx.08.xJ3111A - LCD Display Modification
HP JetDirect rev. G.08.xrev. H.08.xx.08.xJ3111A - LCD Display Modification / source: https://www.securityfocus.com/bid/2245/info Certain versions of HP JetDirect enabled printers provide a function PJL command that changes the LCD display on a printer over TCP/IP. Arbitrary strings can be sent to...
HP JetDirect rev. G.08.x/rev. H.08.x/x.08.x/J3111A - LCD Display Modification
/ source: https://www.securityfocus.com/bid/2245/info Certain versions of HP JetDirect enabled printers provide a function PJL command that changes the LCD display on a printer over TCP/IP. Arbitrary strings can be sent to the LCD display by a remote user using this command. This represents more ...
Java Signed Applet Social Engineering Code Execution
This exploit dynamically creates a .jar file via the Msf::Exploit::Java mixin, then signs the it. The resulting signed applet is presented to the victim via a web page with an applet tag. The victim's JVM will pop a dialog asking if they trust the signed applet. On older versions the dialog will...
CVE-1999-0181
The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands...
PT-1994-1002 · Rpc.Walld · Rpc.Walld
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows for denial of service, social engineering attacks, or the execution of remote commands through the wall daemon. Recommendations: At the moment, there is no...
