2209 matches found
Axon Virtual PBX < 2.13 /logon Multiple Parameter XSS
Binary data 5612.prm...
SOL11797 - Pre-logon sequence vulnerability to token spoofing
A vulnerability exists in the FirePass pre-logon sequence. Under certain conditions, the FirePass controller can accept the output of a pre-logon sequence check that would have been run on a different computer. This vulnerability would allow an attacker to use the pre-logon token from a workstati...
Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037)
Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege 978037 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in...
Microsoft Windows SMB Service Config Enumeration
Nessus was able to obtain, via the SMB protocol, the launch parameters of each active service on the remote host executable path, logon type, etc.. C Tenable, Inc. include"compat.inc"; if description scriptid44401; scriptversion"1.21"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2009-4038
Multiple cross-site scripting XSS vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 onok or 2 oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2009-4038: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 onok or 2 oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained...
Windows 2008 bypass the logon password validation vulnerability-vulnerability warning-the black bar safety net
This article by Rainy'Fox original, reproduced please indicate the source ! In the login window can be seen to the lower left corner of the icon, click on the following pop-up window! Select the second magnifying glass, then click apply, the application of a magnifying glass app 因为 我们 之前 已经 用...
PT-2009-4852 · Ibm · Ibm Lotus Instant Messaging/Web Conferencing
Name of the Vulnerable Software and Affected Versions: IBM Lotus Instant Messaging and Web Conferencing version 6.5.1 Description: The issue allows remote attackers to enumerate valid usernames by analyzing the different time delays in error messages generated for failed logon attempts, depending...
Microsoft Windows SMB Last Logged On User Disclosure
By connecting to the remote host with the supplied credentials, Nessus was able to identify the username associated with the last successful logon. Microsoft documentation notes that interactive console logons change the DefaultUserName registry entry to be the last logged-on user. C Tenable...
PT-2009-3199 · Microsoft · Windows Http Services +3
Name of the Vulnerable Software and Affected Versions: Windows HTTP Services versions 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 WinINet in Microsoft Internet Explorer versions 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Serve...
E-ShopSystem SQL Injection
|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...
CVE-2008-5407
Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors...
CVE-2008-5407: Improper Authentication
Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors...
Unfixed XSS vulnerability at www.logon-int.com
Security researcher xylitol, has submitted on 23/03/2008 a cross-site-scripting XSS vulnerability affecting www.logon-int.com, which at the time of submission ranked 955812 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...
CVE-2008-1252
bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...
CVE-2008-1252
bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...
CVE-2008-1252: Exposure of Sensitive Information to an Unauthorized Actor
bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject arbitrary web script or HTML via the query string to 1 my.activation.php3 and 2 my.logon.php3...
CVE-2007-6704
Multiple cross-site scripting XSS vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject arbitrary web script or HTML via the query string to 1 my.activation.php3 and 2 my.logon.php3...
Samba "send_mailslot()" function buffer overflow
Overview The Samba "sendmailslot" function contains a stack-based buffer overflow vulnerability which could be exploited by a remote, unauthenticated attacker to execute arbitrary code. Description Samba is a widely used open-source implementation of Server Message Block SMB/Common Internet File...