180 matches found
CVE-2014-3634
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service crash, possibly execute arbitrary code, or have other unspecified impact via a crafted priority PRI value that triggers an out-of-bounds array access...
Access Remote PC 4.5.1 - Local Password Disclosure Exploit
No description provided by source. / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users. Discovered &...
CVE-2013-0847
The ffid3v2parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access...
PYSEC-2011-27
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587...
CVE-2010-4733
WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...
MODx 'ucfg' Parameter Arbitrary File Access
The installed version of MODx allows access to arbitrary files because it fails to perform sufficient validation on 'ucfg' parameter in 'assets/snippets/ajaxSearch/ajaxSearchPopup.php'. By supplying directory traversal strings such as '..%2F' in a specially crafted AjaxSearch 'POST' request, it i...
Access Remote PC 4.5.1 Local Password Disclosure Exploit
No description provided by source. / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users. Discovered &...
CVE-2008-1327
Gallarific does not require authentication for 1 users.php and 2 index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
MS06-025: Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280) (uncredentialed check)
The remote version of Windows contains a version of RRAS Routing and Remote Access Service that is affected by several memory corruption vulnerabilities. An attacker may exploit these flaws to execute code on the remote service. C Tenable Network Security, Inc. include"compat.inc"; if description...
[SA15932] Access Remote PC User Credentials Disclosure
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Access Remote PC weak password encryption
Proxy server password is stored in cleartext in registry...
Access Remote PC 4.5.1 - Local Password Disclosure
Access Remote PC 4.5.1 - Local Password Disclosure / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users...
Access Remote PC 4.5.1 Local Password Disclosure Exploit
Exploit for unknown platform in category local exploits ======================================================== Access Remote PC 4.5.1 Local Password Disclosure Exploit ======================================================== / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan...
Access Remote PC 4.5.1 - Local Password Disclosure
/ Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA We...
OpenConnect WebConnect 6.4/6.5 - jretest.html Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/12613/info OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of service vulnerability. A remote attacker may exploit this vulnerability to...
Knox Arkeia Server Backup 5.3.x - Remote Code Execution
/ Knox Arkiea Server Backup arkiead local/remote root exploit Targets for Redhat 7.2/8.0, Win2k SP2/SP3/SP4, WinXP SP1, Win 2003 EE Works up to current version 5.3.x --------------- Linux x86: ./arksink2 Exports an xterm to the box of your choosing. Make sure to "xhost +" on the box you're...
CVE-2001-1414
The Basic Security Module BSM for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root...
CVE-2004-2612
BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users...
DUclassmate 1.x - account.asp?MM-recordId Arbitrary Password Modification
DUclassmate 1.x - account.asp?MM-recordId Arbitrary Password Modification source: https://www.securityfocus.com/bid/11363/info Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also...
CVE-2004-0680
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...