6583 matches found
Prolink PRN2001 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: Prolink PRN2001 Multiple Vulnerabilities 1. -Advisory Information- Title: Prolink PRN2001 Multiple Vulnerabilities Firmware: Ver 1.2 Firmware URL: http://www.prolink2u.com/download/fw/fwPRN2001V1.220130323.zip Vendor...
Microsoft IIS FTP Server Telnet IAC Buffer Overflow (CVE-2010-3972)
A heap buffer overflow vulnerability exists within the Microsoft Internet Information Services IIS FTP Service. The vulnerability is due to a memory corruption encountered when encoding Telnet IAC characters in a FTP response. A remote unauthenticated attacker may exploit this vulnerability by...
Arris VAP2500 Authentication Bypass Vulnerability
Exploit for hardware platform in category web applications !/usr/bin/env ruby require 'net/http' require 'digest/md5' if !ARGV0 puts "Usage: $0 " exit0 end host = ARGV0 newpass = "h4x0r3d!" http = Net::HTTP.newhost.start users = nil users = http.requestget"/admin.conf".body.split"\n".map! |user|...
Arris VAP2500 - Authentication Bypass
Arris VAP2500 - Authentication Bypass !/usr/bin/env ruby require 'net/http' require 'digest/md5' if !ARGV0 puts "Usage: $0 " exit0 end host = ARGV0 newpass = "h4x0r3d!" http = Net::HTTP.newhost.start users = nil users = http.requestget"/admin.conf".body.split"\n".map! |user| user.sub/^.?,.$/,"\1"...
Arris VAP2500 - Authentication Bypass
!/usr/bin/env ruby require 'net/http' require 'digest/md5' if !ARGV0 puts "Usage: $0 " exit0 end host = ARGV0 newpass = "h4x0r3d!" http = Net::HTTP.newhost.start users = nil users = http.requestget"/admin.conf".body.split"\n".map! |user| user.sub/^.?,.$/,"\1" if users puts " found user accounts:...
Cisco Web Security Appliance Telnet Remote Code Execution (cisco-sa-20120126-ironport)
According to its self-reported version, the version of AsyncOS running on the remote Cisco Web Security Appliance WSA is affected by a remote code execution vulnerability due to a buffer overflow condition in the telnet component. C Tenable Network Security, Inc. include"compat.inc"; if descripti...
Cisco Content Security Management Appliance Telnet Remote Code Execution (cisco-sa-20120126-ironport)
According to its self-reported version, the version of AsyncOS running on the remote Cisco Content Security Management Appliance SMA is affected by a remote code execution vulnerability due to a buffer overflow condition in the telnet component. C Tenable Network Security, Inc. include"compat.inc...
Cisco Email Security Appliance Telnet Remote Code Execution (cisco-sa-20120126-ironport)
According to its self-reported version, the version of AsyncOS running on the remote Cisco Email Security Appliance ESA is affected by a remote code execution vulnerability due to a buffer overflow condition in the telnet component. C Tenable Network Security, Inc. include"compat.inc"; if...
Konke Smart Plug K - Authentication Bypass Vulnerability
No description provided by source. ----------------------------------------------------------------------- Konke Smart Plug Authentication Bypass Vulnerability ----------------------------------------------------------------------- Author : gamehacker&zixian Mail :...
Unprotected Telnet Service
An unprotected Telnet service is listening on this port. A remote attacker can utilize this to execute commands on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79235; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2014/11/13 19:54:52 $";...
[SECURITY] Fedora 20 Update: curl-7.32.0-15.fc20
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2014-6617 Softing FG-100 Backdoor Account
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Softing FG-100 PB Vendor: Softing AG www.softing.com CVD ID: CVE-2014-6617 Subject: Backdoor Account Risk: High Effect: Remotely exploitable Author: Ingmar Rosenhagen Daniel Marzin Johannes Klick Date: 05.11.2014...
ZTE 831CII Multiple Vulnerablities
Hardcoded default misconfiguration - The modem comes with admin:admin user credintials. Stored XSS - http://192.168.1.1/psilan.cgi?action=saveðIpAddress=192.168.1.1ðSubnetMask=255.255.255.0&hostname=ZXDSL83C1II&domainname=home27;alert28029;//&enblUpnp=1&enblLan2=0 Any user browsing to...
Softing FG-100 PB Hardcoded Backdoor
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Softing FG-100 PB Vendor: Softing AG www.softing.com CVD ID: CVE-2014-6617 Subject: Backdoor Account Risk: High Effect: Remotely exploitable Author: Ingmar Rosenhagen Daniel Marzin Johannes Klick Date: 05.11.2014...
MLDonkey - multi-protocol P2P file sharing application
MLDonkey is a multi-platform and freely distributed eDonkey client, a P2P Peer-to-Peer file-sharing application. It provides users with both a server daemon and graphical user interface GUI. It seems to be the first ever open source application that could access the eDonkey peer-to-peer file...
Konke Smart Plug Authentication Bypass
----------------------------------------------------------------------- Konke Smart Plug Authentication Bypass Vulnerability ----------------------------------------------------------------------- Author : gamehacker&zixian Mail : gh&zixian Date : Oct, 17-2014 Vendor : http://www.kankunit.com/ Li...
Konke Smart Plug K - Authentication Bypass Vulnerability
Exploit for hardware platform in category remote exploits ----------------------------------------------------------------------- Konke Smart Plug Authentication Bypass Vulnerability ----------------------------------------------------------------------- Author : gamehacker&zixian Mail : gh&zixia...
QQ input method pure version 1. 1 The presence of IME vulnerability-vulnerability warning-the black bar safety net
In the login system before, or Telnet before you can open the input method selected help, you can open the IE browser, by saving the page you can open the computer file list. The main is now popular PC end windows 8 system...
Zarp - Local Network Attack Framework
Zarp is a network attack tool centered around the exploitation of local networks. This does not include system exploitation, but rather abusing networking protocols and stacks to take over, infiltrate, and knock out. Sessions can be managed to quickly poison and sniff multiple systems at once,...
Cisco Patches Three-Year-Old Telnet Remote Code Execution Bug in Security Appliances
There is a severe remote code execution vulnerability in a number of Cisco’s security appliances, a bug that was first disclosed nearly three years ago. The vulnerability is in Telnet and there has been a Metasploit module available to exploit it for years. The FreeBSD Project first disclosed the...