254 matches found
netwin netauth 4.2 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1587/info A remote user is capable of gaining read access to any known file residing on a host running Netwin Netauth through directory traversal. Appending a series of '../' and the desired file name to the 'page' variab...
Netwin SurgeFTP 2.3a1 SurgeFTPMGR.CGI Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21534/info Netwin SurgeFTP is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the...
Netwin SurgeFTP 1.0 b Malformed Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2442/info SurgeFTP is a FTP Server distributed and maintained by Netwin. SurgeFTP is a configurable, easily maintained ftp server, functional on both the UNIX and Windows platforms. A problem with the SurgeFTP program cou...
NetWin DMail 2.7/2.8 ETRN Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1297/info NetWin's DMail is an alternative mail-server solution for unix and NT servers. There is a buffer overflow vulnerability in the server daemon that could allow remote attackers to execute arbitrary commands as roo...
NetWin DMail 2.x,SurgeFTP 1.0/2.0 Weak Password Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3075/info The Netwin Authentication module, or NWAuth, is an external authentication module used by several Netwin products. A simple one-way hash function is used by NWAuth to perform password encryption operations. As a...
NetWin SurgeMail Webmail Server page Parameter Format String - Ver2 (CVE-2008-1055)
A format string vulnerability has been reported in NetWin SurgeMail and WebMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2013-4742
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string within the authentication request...
CVE-2013-4742
CVE-2013-4742 describes a buffer overflow in SurgeFTP Server (NetWin SurgeFTP) prior to version 23d2 triggered during authentication by a long string in the request. The effect is a denial of service (crash) and potentially arbitrary code execution via memory corruption on heap/stack. Root cause:...
CVE-2013-4742
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string within the authentication request...
CVE-2013-4742: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string within the authentication request...
Netwin SurgeFTP Remote Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Netwin SurgeFTP...
Netwin SurgeFTP - Remote Command Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Netwin SurgeFTP...
Netwin SurgeFTP Remote Command Execution
This module exploits a vulnerability found in Netwin SurgeFTP, version 23c8 or prior. In order to execute commands via the FTP service, please note that you must have a valid credential to the web-based administrative console. Module Options msf use exploit/multi/http/netwin/surgeftpexec msf...
Cross site scripting
Cross-site scripting XSS vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IFRAME element in the body of an HTML e-mail message...
CVE-2012-2575
NetWin SurgeMail 6.0a4 is affected by a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IFRAME element in the body of an HTML e-mail message. This is triggered by HTML emails, enabling script execution in som...
CVE-2012-2575: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IFRAME element in the body of an HTML e-mail message...
Surgemail 6.0a4 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: SurgeMail Version: 6.0a4 Vendor Site: http://www.netwinsite.com Software Download: http://netwinsite.com/download.htm Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with disclosu...
Surge-FTP 23b6 Cross Site Scripting
Exploit Title : Surge-FTP v23b6 Admin multiple reflected XSS Vulnerabilities Authored by : Houssam Sahli = backtronuxgmailcom Date : 16/08/2011 Vendor: NetWin Product web page: http://netwinsite.com download link : http://netwinsite.com/ftp/surgeftp/surgeftp23b6windows.exe Affected version: v23b6...
SurgeMail SurgeWeb Cross Site Scripting Vulnerability
The host is running SurgeMail and is prone to Cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsurgemailsurgewebxssvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ SurgeMail SurgeWeb Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...