475 matches found
PT-2013-2972
Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V affected versions not specified Description The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component does not properly authenticate VSM/VEM packets. This allows...
BigAnt Server DUPF Command Arbitrary File Upload (CVE-2012-6274)
An arbitrary file upload vulnerability exists in BigAnt Server. The vulnerability is due to lack of authentication and a directory traversal weakness in processing a DUPF command. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server...
BigAnt Messenger Server DUPF Arbitrary File Upload
Added: 04/01/2013 CVE: CVE-2012-6274 BID: 57214 OSVDB: 89342 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt Server 2.97 and earlier does not require authentication for file uploading, and does not...
PT-2013-2729
Name of the Vulnerable Software and Affected Versions EMC Smarts Network Configuration Manager NCM versions prior to 9.2 Description The issue allows remote attackers to execute arbitrary code due to a lack of authentication for Java RMI method calls. Recommendations For versions prior to 9.2,...
v0pCr3w Web Shell Remote Code Execution
This module exploits a lack of authentication in the shell developed by v0pCr3w and is widely reused in automated RFI payloads. This module takes advantage of the shell's various methods to execute commands. Module Options msf use exploit/multi/http/v0pcr3w/exec msf undefinedexec show actions...
Adobe InDesign Server SOAP Request Lack of Authentication
Access control weakness vulnerability exists in Adobe InDesign Server.The vulnerability is due to a failure to restrict access to the SOAP interface.Successful exploitation could result in execution of arbitrary script code in the context of the service...
D-Link DIR-645 Authentication Bypass Vulnerability
D-Link DIR-645 devices suffer from a direct access authentication bypass vulnerability. Unauthenticated remote access to D-Link DIR-645 devices ======================================================= ADVISORY INFORMATION Title: Unauthenticated remote access to D-Link DIR-645 devices Discovery dat...
PT-2012-1184
Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon Quantum PLC affected versions not specified Schneider Electric Modicon M340 affected versions not specified Description The issue is related to a lack of authentication between the Unity software and the PLC, which c...
KLA10394 Multiple vulnerabilities in Siemens
Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...
Objectivity/DB Lack of Authentication Remote Exploit
!/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object store is the enabling technology powering...
Objectivity/DB Lack Of Authentication
!/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object store is the enabling technology powering...
Objectivity/DB - Lack of Authentication
!/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object store is the enabling technology powering...
Objectivity/DB Lack of Authentication Remote Exploit
Exploit for windows platform in category dos / poc !/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persisten...
Open-AudIT SQL Injection / Cross Site Scripting / Local File Inclusion
GVI-2010-02 : Multiple vulnerabilities in Open-AudIT ==================================================== 1 Overview ---------- Excerpt from http://www.open-audit.org : "Open-AudIT is an application to tell you exactly what is on your network, how it is configured and when it changes. Open-AudIT...
Open-AudIT - Multiple Vulnerabilities
GVI-2010-02 : Multiple vulnerabilities in Open-AudIT ==================================================== 1 Overview ---------- Excerpt from http://www.open-audit.org : "Open-AudIT is an application to tell you exactly what is on your network, how it is configured and when it changes. Open-AudIT...
WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible
SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...
EUVD-2002-2149
Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request...
CVE-2004-1365
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user...
Critical Vulnerability in Altiris Deployment Server architecture
Subject: Design flaw in Altiris Deployment Server - Attacker can take over all clients on a network with Admininstrator Rights and Remote Control ability PRODUCTS AFFECTED: --------------------------------------------------------------------------------------------- ALTIRIS DEPLOYMENT SERVER - 5....