CVE-2010-2466

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not properly prevent downloading of database backups, which allows remote attackers to obtain sensitive information via requests for full.dar files with predictable filenames...

CVE-2010-2465

The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via...

CVE-2010-2465: Undefined Security Weakness

The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via...

CVE-2010-2468: Undefined Security Weakness

The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password...

CVE-2010-2466: Undefined Security Weakness

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not properly prevent downloading of database backups, which allows remote attackers to obtain sensitive information via requests for full.dar files with predictable filenames...

CVE-2010-2467: Undefined Security Weakness

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests...

S2 NetBox allows unauthenticated HTTP access to node logs, backups, and employee photographs

Overview S2 NetBox and related products do not adequately restrict access to node logs, backups, and employee photographs. A remote, unauthenticated attacker could use information obtained from a vulnerable system to aid in further attacks. Description S2 NetBox is a line of "...open architecture...

Motorola Surfboard Cable Modem - Directory Traversal

Motorola Surfboard Cable Modem - Directory Traversal Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls...

SAP MaxDB Malformed Handshake Request Remote Code Execution

No description provided by source. !/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.comhttp://sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying 172.16.29.133...

SAP MaxDB - Malformed Handshake Request Remote Code Execution

SAP MaxDB - Malformed Handshake Request Remote Code Execution !/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying...

SAP MaxDB - Malformed Handshake Request Remote Code Execution

!/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying 172.16.29.133... Connected to 172.16.29.133. Escape character is...

ProSSHD Buffer Overflow

Exploit Title: ProSSHD buffer overflow Date: 2010.02.19 Author: S2 Crew Hungary Software Link: http://www.labtam-inc.com/ Version: 1.2 20090726 Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII...

ProSSHD v1.2 20090726 Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================= ProSSHD v1.2 20090726 Buffer Overflow Exploit ============================================= Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX...

gitWeb 1.x Remote Command Execution

Exploit Title: gitWeb remote command execution Date: 2009.06.19 Author: S2 Crew Hungary Software Link: - Version: GIT 1.X Tested on: debian linux, GIT 1.5.2 CVE: CVE-2008-5516 - CVE-2008-5517 Code:...

Joomla! 1.5 Core Design Scriptegrator Local File Inclusion

Exploit Title: Core Design Scriptegrator plugin for Joomla! 1.5 file inclusion Date: 2010.02.03 Author: S2 Crew Hungary Software Link: http://www.greatjoomla.com/extensions/plugins/core-design-scriptegrator-plugin.html Version: 1.4.1 stable release Tested on: Debian Linux, Apache, Joomla! 1.5 Cod...

gitWeb 1.5.2 - Remote Command Execution

Exploit Title: gitWeb remote command execution Date: 2009.06.19 Author: S2 Crew Hungary Software Link: - Version: GIT 1.5.2 Tested on: debian linux, GIT 1.5.2 CVE: CVE-2008-5516 - CVE-2008-5517 Code: The cgi script doesn't show the command output blind command execution ; Vulnerable functions in...

CVE-2009-3734

Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5.x allows remote attackers to cause a denial of service configuration reset via a request to a crafted URI...

Cross site request forgery (csrf)

Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5.x allows remote attackers to cause a denial of service configuration reset via a request to a crafted URI...

CVE-2009-3734

Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5.x allows remote attackers to cause a denial of service configuration reset via a request to a crafted URI...

CVE-2009-3734

CVE-2009-3734 affects the S2 Security NetBox/Linear eMerge Access Control System management console (2.5.x). An unauthenticated attacker can trigger a crafted URI to reset the management component to factory settings, causing a denial-of-service in the management console while nodes remain operat...