780 matches found
Real Networks GameHouse dldisplay ActiveX control 0 Port Buffer Overflow (1)
No description provided by source. source: http://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the corre...
Electronic Arts Battlefield 1942 1.2/1.3 - Remote Administration Authentication Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/6967/info It has been reported that Battlefield 1942 does not properly check input sent to the administration port of a game server. By sending a string of excessive length, a remote attacker could crash the server,...
Root Exploit Western Digital's WD TV Live SMP/Hub
No description provided by source. Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of it...
Verizon Fios Router MI424WR-GEN3I - CSRF Vulnerability
No description provided by source. Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36 http://verizon.com CVE: CVE-2013-01...
SAMBA 2.0.7 SWAT Logfile Permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1874/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...
Ericsson HM220dp DSL Modem World Accessible Web Administration Interface Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access. There is no option to enable any...
Real Networks GameHouse dldisplay ActiveX control 0 Port Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the corre...
D-Link WBR-1310 Authentication Bypass Vulnerability
No description provided by source. Exploit Title: D-Link WBR-1310 Authentication Bypass Vulnerability Shodan Dork: Embedded HTTP Server 2.00 Date: 22-Dec-2010 Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dlink.com/products/?pid=474 Version: 2.00 Tested on: WBR-1301, firmware versio...
Windows NTLM Weak Nonce Vulnerability
No description provided by source. Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory UR...
AltaVista Search Intranet 2.0 b/2.3 A Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/896/info The AltaVista Search engine sets up a webserver at port 9000 to listen for search queries. The main search function will accept a single '../' string in the query, providing access to all documents in the 'http'...
Multiple Linksys Router CSRF Vulnerabilities
No description provided by source. It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have writt...
axis network camera 2.x and video server 1-3 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous user...
NT IIS4 Remote Web-Based Administration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left i...
SAMBA 2.0.7 SWAT Logging Failure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1873/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...
Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/695/info Hybrid Network's cable modems are vulnerable to several different types of attack due to a lack of authentication for the remote administration/configuration system. The cable modems use a protocol called HSMP,...
WinComLPD <= 3.0.2 - Buffer Overflow
No description provided by source. $Id: wincomlpdadmin.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
CVE-2014-3810
Dolphin (BoonEx)
FBI Arrests 100 Hackers linked to Blackshades Malware
On Friday, we reported about the large-scale operation of International raids launched by the FBI and other law enforcement officials in countries around the world to arrest the targeted customers of a popular Remote Administration Tool RAT called ‘Blackshades,’ which is designed to take over the...
FBI raids BlackShades RAT Malware Customers in Europe and Australia
When it comes to crime, whether it’s an online or offline, FBI doesn't spare anyone. According to the French media reports and various announcements on underground forums by hacking groups, the FBI has started a large-scale operation of International raids with the help of local law enforcement...
CVE-2013-3514
Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. dot dot in the group parameter to 1 plugin-preferences.php or 2 plugin-settings.php in www/admin, a different vulnerability than CVE-2013-7376. NOTE: thi...