Design/Logic Flaw

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2009-1472

The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to 1 execute arbitrary Java code, or 2 gain access to machines connected to...

Multiple vulnerabilities in several ATEN IP KVM Switches

Jakob Lell from the TU Berlin computer security working group http://www.agrs.tu-berlin.de/v-menue/agrechnersicherheit/parameter/en/ has discovered multiple vulnerabilities in several ATEN IP KVM Switches. Affected products: - ATEN KH1516i IP KVM Switch browser firmware version 1.0.063 - ATEN...

ATEN IP KVM Switches multiple cryptographic vulnerabilities

Same SSL certificate is used for all devices, static symmetric key is used for code signing, mouse events are not encrypted, predictable session key is used...

CVE-2009-0625

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18.0 allows remote attackers to cause a denial of service device reload via a crafted SNMPv3 packet...

CVE-2009-0623

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.3 and Cisco ACE 4710 Application Control Engine Appliance before A32.1 allows remote attackers to cause a denial of service device reload via a crafted SSH packet...

CVE-2009-0625

CVE-2009-0625 affects Cisco ACE 4710 Appliance and Cisco ACE Module for Catalyst 6500/7600. The Cisco advisory details multiple separate vulnerabilities: Default usernames and passwords (affecting ACE 4710 before A1(8a) and ACE Module before A2(1.2/1.1)); Privilege Escalation (ACE 4710 before A1(...

CVE-2009-0623

The CVE-2009-0623 entry applies to Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and Cisco ACE 4710 Appliance. Affected vulnerabilities include Crafted SSH Packet which can cause the device to reload (DoS) when SSH access is configured. The Cisco advisory lists affected compo...

Google Chrome - 'ChromeHTML://' Remote Parameter Injection

click me milw0rm.com 2008-12-23...

FreeBSD Security Advisory (FreeBSD-SA-06:14.fpu.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:14.fpu.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

vim-sanitize.txt

Vim: Arbitrary Code Execution in Commands: K, Control-, g 1. SUMMARY Product : Vim -- Vi IMproved Versions : 3.0--current, possibly older Impact : Arbitrary code execution Wherefrom: Local Original : http://www.rdancer.org/vulnerablevim-K.html Insufficient sanitization can lead to Vim executing...

hacking the mitsubishi GB-50A

Hi All, Well, it's been over 4 months since my plea for a security contact at Mitsubishi Electric to come forward. Since no one has, I thought I'd release a POC for hacking one. It's not exactly hard, the web controller uses a nasty set of Java applets to interact with itself. The shocking thing ...

Debian Security Advisory DSA 245-1 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory DSA 245-1. OpenVAS Vulnerability Test $Id: deb2451.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 245-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2002-2415

The CVE-2002-2415 entry concerns Allied Telesyn AT-8024 (version 1.3.1) and Rapier 24 switches. The vulnerability allows remote authenticated users to cause a denial of service in the management interface by sending a stream of zero (null) bytes via UDP to a running service. Affected component: m...

CVE-2002-2316

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing...

CVE-2002-2316

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 may fail to learn MAC addresses from a single initial packet, causing unicast traffic to be broadcast and allowing remote attackers to sniff sensitive network information. The connected Red Hat and CVE registries confirm th...

CVE-2003-1507

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access...

CVE-2003-1507

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches expose a default superuser account with the password “planet,” enabling remote administrators to gain full control. The vulnerability is described consistently across CVE records and NVD entries, with a base CVSS2 score of 10.0 (high impa...

CVE-2004-2691

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

Sun Brocade Switches远程拒绝服务漏洞

Sun Brocade Switches是Sun公司开发的交换机系列。 一个内核问题由非特权用户派生的内何进程可引起部分Brocade交换机停止响应或者重新启动。导致部分SAN设备的连接暂时丢失。 目前没有详细漏洞细节提供。 Sun SG-XSWBRO4900 SilkWorm 4900 switch 0 Sun SG-XSWBRO48ZP Silkworm 48000 Director 0 Sun SG-XSWBRO3900 SilkWorm 3900 switch 0 Sun SG-XSWBRO3850 SilkWorm 3850 switch 0 Sun SG-XSWBRO3250...