180 matches found
Cisco - Cisco Global er Tool
!/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main $host = ""; $expvuln = ""; $host = @ARGV 1 ...
vBulletin calendar.php eventid Parameter SQL Injection
A vulnerability has been discovered in the 'calendar.php' script that allows unauthorized users to inject SQL commands through the 'eventid' parameter. An attacker may use this flaw to gain the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From:...
Alt-N MDaemon 6.xWorldClient - Form2Raw Raw Message Handler Buffer Overflow (2)
Alt-N MDaemon 6.xWorldClient - Form2Raw Raw Message Handler Buffer Overflow 2 // source: https://www.securityfocus.com/bid/9317/info It has been reported that MDaemon/WorldClient mail server may be prone to a buffer overflow vulnerability when handling certain messages with a 'From' field of over...
[UNIX] Vulnerability in Bandsite Allows Gaining Admin Access
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure
Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure source: https://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The...
SheerDNS < 1.0.1 Multiple Vulnerabilities
The remote server seems to be running SheerDNS 1.0.0 or older. This version is vulnerable to several flaws allowing : - A remote attacker to read certain files with predefined names A, PTR, CNAME, ... - A local attacker to read the first line of arbitrary files with the privileges of the DNS serv...
rsync Service Detection
The remote rsync server can be accessed remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11389; scriptversion "$Revision: 1.24 $"; scriptcvsdate"$Date: 2017/06/12 21:52:41 $"; scriptnameenglish:"rsync Service Detection"; scriptsummaryenglish:"Shows the remote...
AutomatedShops WebC 2.05.0 Script - Name Remote Buffer Overrun
AutomatedShops WebC 2.05.0 Script - Name Remote Buffer Overrun // source: https://www.securityfocus.com/bid/7268/info It has been reported that a boundary condition error exists in WebC. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable host. /...
CVE-2002-1913
phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable...
[SECURITY] [DSA 214-1] New kdentwork packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 214-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2002 http://www.debian.org/security/faq -...
CVE-2002-0922
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to 1 default%2edb or 2 default%2edb.style, or remote authenticated users to perform administrative actions via 3 a database parameter set to default%2edb...
CVE-2002-0341
GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter...
CVE-2001-0953
Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root...
NetSQL 1.0 - Remote Buffer Overflow
NetSQL 1.0 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2885/info NetSQL is an implementation of a database and toolset distributed by Munica Corporation. NetSQL is part of 5 piece software package called the Webpak, containing utilities for features such as web boards,...
BSD (telnetd) Remote Root Exploit
Exploit for bsd platform in category remote exploits ================================= BSD telnetd Remote Root Exploit ================================= / 7350854 - x86/bsd telnetd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Securit...
Way-Board 2.0 - File Disclosure
source: https://www.securityfocus.com/bid/2370/info A remote user could gain read access to known files outside of the root directory where Way-Board resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename will disclose the requested file...
CVE-2000-0940
Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. dot dot attack on the "name" or "display" parameter...
Libc locale - Local Privilege Escalation (2)
Libc locale - Local Privilege Escalation 2 / source: https://www.securityfocus.com/bid/1634/info ectiva 4.x/5.x,Debian 2.x,IBM AIX 3.x/4.x,Mandrake 7,RedHat 5.x/6.x,IRIX 6.x, Solaris 2.x/7/8,Turbolinux 6.x,Wirex Immunix OS 6.2 Locale Subsystem Format String Many UNIX operating systems provide...