CVE-2008-2233

CVE-2008-2233 affects the Openwsman client (Openwsman 1.2.0 and 2.0.0). In the provided documents, the issue is described as allowing remote Openwsman servers to replay SSL sessions via unspecified vectors. Public documents show patches/fixes in openSUSE SUSE updates for libwsman-devel and relate...

CVE-2008-2233: Improper Control of Generation of Code

The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors...

BT Home Hub管理员口令泄露漏洞

BUGTRAQ ID: 29387 BT Home Hub是家用的无线Internet路由器。 BT Home Hub的最新固件版本添加了一个新的安全功能，允许将默认的管理员口令从admin更改为路由器的序列号，但只要向路由器所在的网络发送MDAP多播请求就可以得到Home Hub的序列号。 如果要利用这个漏洞，攻击者必须通过ethernet或Wi-Fi加入到Home Hub所在的LAN。有两种方式可以入侵到BT Home Hub Wi-Fi网络： - arp回放注入和弱IV破解 - 通过SSID暴力猜测Home Hub的默认WEP密钥列表 British...

irforum-rfi.txt

Istant-Replay Forum Remote File Inclusion Vulnerability AUTHOR: THuGM4N Email : [email protected] Script : Istant-Replay Forum Site : http://www.chattaitaliano.com Vulnerable CODE : /read.php $a = $GET'data'; $b = $GET'post'; $foo = include "$a.txt"; BUT THE EXPLOIT IS LIKE THAT :...

remote file include

Istant-Replay Forum Remote File Inclusion Vulnerability AUTHOR: THuGM4N Email : [email protected] Script : Istant-Replay Forum Site : http://www.chattaitaliano.com Vulnerable CODE : /read.php $a = $GET'data'; $b = $GET'post'; $foo = include "$a.txt"; BUT THE EXPLOIT IS LIKE THAT :...

Istant-Replay - 'read.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28797/info Istant-Replay is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are...

Istant-Replay - read.php Remote File Inclusion

Istant-Replay - read.php Remote File Inclusion source: https://www.securityfocus.com/bid/28797/info Istant-Replay is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application...

Authentication flaw

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

CVE-2008-1527

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

CVE-2008-1527

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

CVE-2008-1527: Undefined Security Weakness

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

Debian Security Advisory DSA 1175-1 (isakmpd)

The remote host is missing an update to isakmpd announced via advisory DSA 1175-1. A flaw has been found in isakmpd, OpenBSD's implementation of the Internet Key Exchange protocol, that caused Security Associations to be created with a replay window of 0 when isakmpd was acting as the responder...

Buffer overflow

Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to 1 execute arbitrary code via a long game command in a replay .rpl file and 2 cause a denial of service application crash via a long SAY command that omits a required LF character; and allow remote...

CVE-2007-4447: Undefined Security Weakness

Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to 1 execute arbitrary code via a long game command in a replay .rpl file and 2 cause a denial of service application crash via a long SAY command that omits a required LF character; and allow remote...

CVE-2007-4447

Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to 1 execute arbitrary code via a long game command in a replay .rpl file and 2 cause a denial of service application crash via a long SAY command that omits a required LF character; and allow remote...

lfs-overflow.txt

/ 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over flow where im able to execute shell code on the user's...

Live for Speed S1/S2/Demo (.spr file) Buffer Overflow Exploit

No description provided by source. / 0day Live for speed patch x s2 /s1 and demo local .Spr File buffer over flow Spr file's are also exploitable although i had to go about it a different Way,At first it wasn't possible to do a jmp esp,But with a little more buffer i Managed to get it to point to...

Design/Logic Flaw

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit...

CVE-2007-4152

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit...

CVE-2007-4152

The CVE-2007-4152 issue affects Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0. The vulnerability allows remote replay of data from the DETAILS and PROCESS sections of a session that schedules an audit. This is the stated impact in the provided documents; no exploitation ...