CVE-2010-4507

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

CVE-2010-4507

CVE-2010-4507 affects Clear iSpot / ClearSpot 2.0.0.0 (R1679) and ClearSpot 2.0.0.0 (R1512/R1786) with firmware 1.9.9.4. Trustwave SpiderLabs TWSL2010-008 documents multiple CSRF vulnerabilities in webmain.cgi (act_cmd_result, act_network_set, act_set_wimax_etc_config) and upgrademain.cgi (act_fi...

CVE-2010-4507

Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...

Nmap NSE: Telnet Brute

This script attempts to get Telnet login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org telnet-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaptelnetbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Telnet Brute NSE...

Microsoft Windows IIS FTP Server DOS Vulnerability

This host is running Microsoft IIS with FTP server and is prone to Denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbmsiisftpddosvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft Windows IIS FTP Server DOS Vulnerability Authors: Sooraj KS Updated By : Sooraj KS on 2011-04-12...

Microsoft Windows IIS FTP Server DOS Vulnerability

Microsoft IIS with FTP server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: Telnet Brute

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for krb5-appl MDVA-2010:236 (krb5-appl)

Check for the Version of krb5-appl OpenVAS Vulnerability Test Mandriva Update for krb5-appl MDVA-2010:236 krb5-appl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for krb5-appl MDVA-2010:236 (krb5-appl)

Check for the Version of krb5-appl OpenVAS Vulnerability Test Mandriva Update for krb5-appl MDVA-2010:236 krb5-appl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

PT-2010-5205

Name of the Vulnerable Software and Affected Versions Microsoft FTP Service versions 7.0 through 7.5 for Internet Information Services IIS 7.0 and 7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FTP command. This is due to a...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

Clear iSpot/Clearspot 2.0.0.0 - Cross-Site Request Forgery

Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices...

OpenVZ Guest Detection

/proc/userbeancounters could be read. This file provides information to the guest operating system in OpenVZ containers. TRUSTED...

MediaCoder 0.7.5.4795 Buffer Overflow

Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested on: Microsoft Windows XP SP2 CVE : N / A The vendor is...

Mediacoder 0.7.5.4797 - '.m3u' Local Buffer Overflow (SEH)

Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested on: Microsoft Windows XP SP2 CVE : N / A The vendor is...

ProFTPd 1.3.2 rc3 < 1.3.3b (FreeBSD) - Telnet IAC Buffer Overflow (Metasploit)

$Id: proftptelnetiac.rb 11208 2010-12-02 21:10:03Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mediacoder 0.7.5.4797 - .m3u Local Buffer Overflow (SEH)

Mediacoder 0.7.5.4797 - .m3u Local Buffer Overflow SEH Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested...

Wireshark 1.4.2 & Wireshark 1.2.13 - new version released !

"Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education." The following protocols have been updated – AgentX, ANCP, DIAMETER, HTTP, IP, LDSS, MIME, NBNS, PROFINET, SIP, TCP, Telnet, ZigBee. This update also fixes many...

CVE-2010-4233

The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access...