2023 matches found
zyxelreset.txt
Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...
Router ZyXEL Prestige 650 HW http remote admin.
Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...
Echo Security Advisory 2004.7
ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...
wpquiz.txt
Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...
WpQuiz Gain Admin Rightd Exploit found
Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...
Les Visiteurs v2.0.1 code injection vulnerability
Les Visiteurs is a great statistics script written in php. It gives you some graphicals informations on visitors of your website. This script was distributed by phpinfo.net but is no more maintained since a year. --------- In this version severals unprotected includes can be found in files: -...
FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection
source: https://www.securityfocus.com/bid/8863/info It has been reported that FuzzyMonkey MyClassifieds may be prone to a SQL injection vulnerability that may allow an attacker to disclose user passwords by supplying malicious SQL code to the Email variable. This attack may cause the software to...
iisPROTECT Unpassworded Administrative Interface
The remote host is running iisprotect, an IIS add-on to protect the pages served by this server. However, the administration module of this interface has not been password protected. As a result, an attacker may perform administrative tasks without any authentication. %NASLMINLEVEL 70300 C Tenabl...
Microsoft FrontPage Unpassworded Installation
The remote web server appears to have FrontPage Extensions installed with incorrectly set permissions. A remote attacker could exploit this to modify web pages on the server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11455; scriptversion "$Revision: 1.21 $";...
CVE-2002-2152
The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected...
LG Electronics LG3001f router
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Issue: ----------------------------------------------------------------| LG Electronics LR3001f is a WAN router. It comes with no access lists defined, which enables administrator to connect both to port 23/tcp telnet and 80/tcp www server. However, I...
cqure.net.20020408.netware_nwftpd.a
cqure.net Security Vulnerability Report No: cqure.net.20020408.netwarenwftpd.a ======================================== Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the server cpu to spike at 100 cpu hogging t...
CVE-2001-0586
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...
CVE-2001-0586
Affected software: Trend Micro ScanMail for Exchange 3.5 Evaluation. Vulnerability: local attacker can recover administrative credentials by exploiting unprotected registry keys and weakly encrypted passwords. Root cause: insecure credential storage in registry and weak encryption. Impact: potent...
sniffit-exp1.txt
/ Remote overflow in sniffit.0.3.7.beta tested on slackware 7.1 found/coded by g463 -18th january 2002- The vulnerability is triggered when the option -L is called from the command line with 'normmail' ie : ./sniffit -c ./sampleconfigfile -L normmail It calls a piece of code where the buffer is...
SiteScope Web Service Unpassworded Access
The remote SiteScope web service has no password set. An attacker who can connect to this server can view usernames and passwords stored in the preferences section or reconfigure the service. %NASLMINLEVEL 70300 This script was written by H D Moore Changes by Tenable: - Revised plugin title...
Дырка в Spy Anywhere (unprotected admin access)
Используя парль из одного символа можно подключиться с привилегиями администратора...
Remote vulnerability in Ikonboard upto version 2.1.7b
Summary: -------- Ikonboard is a free forum system. Similair to UBB and UB. Versions up to and including 2.1.7b contain a vulnerability that allows commands to be executed as the script user. Therefore compromising security of the system running the board and allowing an attacker to get passwords...
DST2K0035.txt
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...