MS Windows CSRSS Local Privilege Escalation Exploit (MS05-018)

Exploit for unknown platform in category local exploits ============================================================== MS Windows CSRSS Local Privilege Escalation Exploit MS05-018 ============================================================== include include include pragma comment...

CVE-2005-2508: Undefined Security Weakness

dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts...

pluggedBlog.txt

Plugged-Blog XSS and SQL-Injection flaw & Remove Admin vendor url: http://www.pluggedout.com advisory: http://falcondeoro.blogspot.com/2005/07/plugged-blog-xss-and-sql-injection.html vendor notify: yes exploit available: yes Plugged-Blog is a CMS WebBlog-Portal content management systen, theinsta...

CVE-2001-1570

Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2001-1571

The CVE-2001-1571 entry concerns the Windows XP Remote Desktop client, where the Remote Desktop user name is sent in cleartext. This behavior could allow an attacker to sniff and obtain terminal server user account names over the network. The connected Red Hat and CVE references reiterate the sam...

phpSlash account hijacking vulnerability

Sysdream && Serial Savate System. advisory --------------------------------------- xxxxxxxxxxx6.adv.en Program : PHPSLASH Homepage : http://www.php-slash.org Author Contacted : 05/may/2005 Author's Answer : 06/may/2005 joestewart Version tested : 0.7.1, 0.7.2, 0.8., dev Found by : crashfr at...

McAfee IntruShield Security Management System - Multiple Vulnerabilities

McAfee IntruShield Security Management System - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the...

McAfee IntruShield Security Management System - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the 'intruvert/jsp/systemHealth/SystemEvent.jsp' script. These issues are due to a failur...

Exim <= 4.41 dns_build_reverse Local Exploit

No description provided by source. / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to write home to mother about due to the fact that you need a local user account on a server and all you get is to read other people's emails .... not even m...

Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure

source: https://www.securityfocus.com/bid/13559/info It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files. As a result, user credentials could be exposed to other local users who have permissions to access the...

Default Password (debug) for 'user' Account

The account 'user' on the remote host has the password 'debug'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "user"; password = "debug"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Default Password (forgot) for 'user' Account

The account 'user' on the remote host has the password 'forgot'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "user"; password = "forgot"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2004-1703

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag...

GLSA-200501-39 : SquirrelMail: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-39 SquirrelMail: Multiple vulnerabilities SquirrelMail fails to properly sanitize certain strings when decoding specially crafted strings, which can lead to PHP file inclusion and XSS. Insufficient checking of incoming URLs...

WebAdmin302.txt

WebAdmin is a web application to administer MDaemon and RelayFax. It can be run on its own or as an ISAPI application under Microsoft Internet Information Services IIS. MDaemon is an e-mail server for Microsoft Windows. RelayFax is a fax server also for Microsoft Windows. Both applications have...

Alt-N WebAdmin < 3.0.3 Multiple Remote Vulnerabilities

Binary data 2572.prm...

CVE-2005-0318

usereditaccount.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter...

alt-n WebAdmin 3.0.2 - Multiple Vulnerabilities

alt-n WebAdmin 3.0.2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12395/info Alt-n WebAdmin is reportedly affected by multiple remote vulnerabilities. The application is affected by multiple cross-site scripting issues. An attacker may leverage these issues to execute...

Alt-N WebAdmin Multiple Remote Vulnerabilities (XSS, Bypass Access)

The remote host is running Alt-N WebAdmin, a web interface to MDaemon mail server. The remote version of this software is affected by cross-site scripting vulnerabilities due to a lack of filtering on user-supplied input in the file 'usereditaccount.wdm' and the file 'modalframe.wdm'. An attacker...

IBM Websphere Commerce Database Update Information Disclosure

The remote host is running a version of IBM Websphere Commerce that may allow potentially confidential information to be accessed through the default user account. An attacker, exploiting this flaw, would only need to be able to make standard queries to the application server. %NASLMINLEVEL 70300...