TCP-IP Datalook 1.3 - Local Denial of Service

TCP-IP Datalook 1.3 - Local Denial of Service / IP-DATALOOK Local DoS Exploit --------------------------------- INFGP - Hacking&security Research Resolve host...OK + Connecting...OK Target locked Sending bad procedure...OK Server Disconnected! Tested on Windows2000 SP4 Infos: infamous.2hell.com /...

clarolineVulns.txt

This is a multi-part message in MIME format. ------=NextPart000001B01C54B56.DF10D4A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Zone-H Research Center Security Advisory 200501 http://fr.zone-h.org Date of release: 27/04/2005 Software: Claroline...

CVE-2005-1606

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

CVE-2005-1605

The entry CVE-2005-1605 describes a Cross-site Scripting (XSS) vulnerability in the guestbook of SiteStudio 1.6, exploitable via the name field to either psoft.guestbook.GuestBookServ (Standalone Site Studio) or E-Guest_sign.pl (Integrated Site Studio with H-Sphere). The vulnerability is triggere...

CVE-2005-1606

CVE-2005-1606 affects H-Sphere Winbox 2.4.2 and 2.4.3 RC1. The underlying issue is that usernames and passwords are stored in plaintext in world-readable log files, enabling local users to gain privileges. The documents do not provide explicit exploit details, affected components beyond the log l...

CVE-2005-1605: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

CVE-2005-1606: Undefined Security Weakness

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges...

[Full-disclosure] H-Sphere

------------------------------------------------------------ - EXPL-A-2005-007 exploitlabs.com Advisory 036 - ------------------------------------------------------------ - H-Sphere - AFFECTED PRODUCTS ================= H-Sphere Winbox Positive Software Corporation https://www.psoft.net OVERVIEW...

CVE-2005-1468

CVE-2005-1468 affects Ethereal (before 0.10.11) where multiple dissectors (including WSP, Q.931, H.245, KINK, MGCP, RPC, SMBMailslot, SMB NETLOGON, and others) may crash the analyzer via crafted network traffic, causing a denial of service due to a null dereference. Multiple advisories (RHSA-2005...

CVE-2005-1468: Undefined Security Weakness

Multiple unknown vulnerabilities in the 1 WSP, 2 Q.931, 3 H.245, 4 KINK, 5 MGCP, 6 RPC, 7 SMBMailslot, and 8 SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash via unknown vectors that lead to a null dereference...

I-Mall Commerce - 'i-mall.cgi' Remote Command Execution

I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1 = "/i-mall/i-mall.cgi?p=|"; sub intro sleep 1; ; sub...

I-Mall Commerce - i-mall.cgi Remote Command Execution

I-Mall Commerce - i-mall.cgi Remote Command Execution I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1...

I-Mall Commerce (i-mall.cgi) Remote Command Execution Exploit

Exploit for cgi platform in category web applications ============================================================= I-Mall Commerce i-mall.cgi Remote Command Execution Exploit ============================================================= I-Mall explo Spawn bash style Shell with webserver uid Gree...

CVE-2001-1430

CVE-2001-1430 concerns the Cayman 3220-H DSL Router (1.0) shipped with no password, enabling remote attackers to gain unauthorized access. The vulnerability stems from the device shipping without credentials, leading to potential compromise of confidentiality, integrity, and availability as indic...

CVE-2001-1430

Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access...

CVE-2001-1430: Undefined Security Weakness

Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access...

CVE-2004-0498

The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service crash via crafted H.323 packets...

CVE-2004-2758

Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service segmentation fault and process crash, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

CVE-2004-2629

Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express when used with H.323 conferencing endpoints, Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the...