Linksys E1500/E2500 Remote Command Execution

Some Linksys Routers are vulnerable to an authenticated OS command injection. Default credentials for the web interface are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command. A ping command against a controlled syste...

Polycom Command Shell Authorization Bypass

The login component of the Polycom Command Shell on Polycom HDX video endpoints, running software versions 3.0.5 and earlier, is vulnerable to an authorization bypass when simultaneous connections are made to the service, allowing remote network attackers to gain access to a sandboxed telnet prom...

Linksys WRT54GL apply.cgi Command Execution

Some Linksys Routers are vulnerable to an authenticated OS command injection in the Web Interface. Default credentials are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd generic payload. A ping...

Linksys WRT54GL Remote Command Execution

Some Linksys Routers are vulnerable to OS Command injection. You will need credentials to the web interface to access the vulnerable part of the application. Default credentials are always a good starting point. admin/admin or admin and blank password could be a first try. Note: This is a blind O...

Polycom Command Shell Authorization Bypass

The login component of the Polycom Command Shell on Polycom HDX video endpoints, running software versions 3.0.5 and earlier, is vulnerable to an authorization bypass when simultaneous connections are made to the service, allowing remote network attackers to gain access to a sandboxed telnet prom...

Successful Shell Attack Detected - Windows 'ping' Command

Binary data 6197.prm...

Successful Shell Attack Detected - Linux 'ping' Command

Binary data 6148.prm...

BSA-011 Security Update for znc

Patrick Matthäi pmatthaei uploaded new packages for znc which fixed the following security problems: CVE-2010-2934 Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service exception and daemon crash via unknown vectors related to "unsafe substr calls."...

CVE-2010-2812

Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...

CVE-2010-2812

Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...

DEBIAN-CVE-2010-2812

Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...

CVE-2010-2812

Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...

Command injection

Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...

CVE-2010-2812

Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...

[SECURITY] Fedora 12 Update: iputils-20071127-12.fc12

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic...

CVE-2010-2812: Improper Input Validation

Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...

Nagios3 - 'statuswml.cgi' 'Ping' Command Execution (Metasploit)

$Id: nagios3statuswmlping.rb 9829 2010-07-14 18:23:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Design/Logic Flaw

Accellion Secure File Transfer Appliance before 80105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program...

CVE-2009-4644

The CVE-2009-4644 issue affects the Accellion Secure File Transfer Appliance, specifically versions prior to 8_0_105. It allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands by injecting shell metacharacters via the cli program (demonstrated wit...

CVE-2009-4644: Improper Neutralization of Special Elements used in an OS Command

Accellion Secure File Transfer Appliance before 80105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program...