Cisco Linksys routers vulnerable to remote zero-day exploit

A zero-day vulnerability has been discovered in popular Cisco Linksys routers that allows hackers to gain remote root access. Security vendor DefenseCode discovered the flaw and reported it to Cisco months ago and a fix is already on the way. According to Cisco, more than 70 million Linksys route...

m0n0wall 1.33 Cross Site Request Forgery Vulnerability

m0n0wall version 1.33 suffers from a cross site request forgery vulnerability that can allow for remote root access to the system. Exploit Title: m0n0wall 1.33 CSRF Remote root Access Date: 30/11/2012 Author: Yann CAM @ Synetis Vendor or Software Link: m0n0.ch - m0n0.ch/wall/downloads.php Version...

m0n0wall 1.33 - Multiple Cross-Site Request Forgery Vulnerabilities

m0n0wall 1.33 - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: m0n0wall 1.33 CSRF Remote root Access Date: 30/11/2012 Author: Yann CAM @ Synetis Vendor or Software Link: m0n0.ch - m0n0.ch/wall/downloads.php Version: 1.33 Category: CSRF Remote root Access Google dork: Tested on...

m0n0wall 1.33 Cross Site Request Forgery

Exploit Title: m0n0wall 1.33 CSRF Remote root Access Date: 30/11/2012 Author: Yann CAM @ Synetis Vendor or Software Link: m0n0.ch - m0n0.ch/wall/downloads.php Version: 1.33 Category: CSRF Remote root Access Google dork: Tested on: FreeBSD m0n0wall firewall/router distribution description :...

Mandrake Linux Security Advisory : nfs-utils (MDKSA-2000:021)

A bug recently discovered in the nfs-utils package can theoretically be used for gaining remote root access. While there are currently no known exploits for this bug, we recommend upgrading to the latest version which fixes the bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

OpenSSH 3.5p1 Remote Root Exploit for FreeBSD

OpenSSH 3.5p1 Remote Root Exploit for FreeBSD OpenSSH 3.5p1 Remote Root Exploit for FreeBSD has been shared by kcope on twitter. The Released note is as given below : OpenSSH 3.5p1 Remote Root Exploit for FreeBSD Discovered and Exploited By Kingcope Year 2011 -- The last two days I have been...

FreeBSD : proftpd -- Compromised source packages backdoor (ed7fa1b4-ff59-11df-9759-080027284eaa)

The ProFTPD Project team reports : The security issue is caused due to the distribution of compromised ProFTPD 1.3.3c source code packages via the project's main FTP server and all of the mirror servers, which contain a backdoor allowing remote root access. %NASLMINLEVEL 70300 C Tenable Network...

ProFTPD 1.3.3c Trojan Source Code

== ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server and used their privileges to replace...

proftpd -- Compromised source packages backdoor

The ProFTPD Project team reports: The security issue is caused due to the distribution of compromised ProFTPD 1.3.3c source code packages via the project's main FTP server and all of the mirror servers, which contain a backdoor allowing remote root access...

HP-UX Update for the CIFS Server HPSBUX01062

Check for the Version of the CIFS Server OpenVAS Vulnerability Test HP-UX Update for the CIFS Server HPSBUX01062 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, wha...

Applications can open up remote root access on G1 Phone

Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...

Webmin and Usermin authentication bypass vulnerability

Overview Webmin and Usermin, web-based system management tools for UNIX, contain a vulnerability which may allow a remote attacker to bypass authentication when PAM authentication is used. Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command...

Debian Security Advisory DSA 178-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 178-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-6904

Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access aka Remote Root via unspecified vectors...

Samba 2.2.8 Remote Root Exploit - sambal.c

No description provided by source. / Remote root exploit for Samba 2.2.x and prior that works against Linux all distributions, FreeBSD 4.x, 5.x, NetBSD 1.x and OpenBSD 2.x, 3.x and 3.2 non-executable stack. sambal.c is able to identify samba boxes. It will send a netbios name packet to port 137. ...

[Full-disclosure] Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln)

Here is more information on the confixx vuln released by LoK Crew. Sorry for the poor quality of this posting, I was short of time. Product: ^^^^^^^ Confixx is a comprehensive control panel that provides the best value, proven quality, fully developed feature set and quality support. The software...

[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability

Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.20.05 www.idefense.com/application/poi/display?id=323&type=vulnerabilities October 20, 2005 I. BACKGROUND Ethereal is a full featured open source network protocol analyzer. For more information, see...

Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit

Exploit for linux platform in category remote exploits =============================================================== Ethereal include include include include include unsigned char sipheader = "\x4f\x50\x54\x49\x4f\x4e\x53\x20\x73\x69\x70\x3a\x68\x61\x63"...

Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow

Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes:...