[SA20990] Juniper Networks DX System Log Script Insertion

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

CVE-2006-3567: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the web administration interface logging feature in Juniper Networks Redline DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field...

[VulnWatch] iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability

Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372 January 17, 2006 I. BACKGROUND Cisco IOS Software is the world's leading network infrastructure software,...

CVE-2005-3697

Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...

CVE-2005-3697

Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...

CVE-2005-2584: Undefined Security Weakness

The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access...

Hosting Controller Software Detection

The remote host is running Hosting Controller, a commercial web-hosting automation suite for the Windows Server family platform. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19254; scriptversion"1.15"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Hosting...

CVE-2004-1899

The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes...

CVE-2004-1897

The CVE describes a denial-of-service (segmentation fault) in Monit versions 1.4–4.2 triggered by sending a Basic Authentication request without a password. The underlying issue is a null pointer dereference leading to an out-of-bounds read when Monit decrements a null pointer. Affected software:...

CVE-2004-1899: Undefined Security Weakness

The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes...

CVE-2004-1897: Undefined Security Weakness

Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service segmentation fault by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read...

CVE-2004-1898: Undefined Security Weakness

Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...

CVE-2004-2045: Undefined Security Weakness

The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service device reboot via an HTTP request with a long username...

CVE-2004-1898

Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...

CVE-2004-1898

Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...

Multiple MyWebServer bugs

DoS, administration interface protection bypass...

CVE-2002-1147: Undefined Security Weakness

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the devicereset...

CVE-2004-0610

CVE-2004-0610 affects the Web administration interface of the Microsoft MN-500 Wireless Router. The issue allows remote attackers to cause a denial of service (connection refusals) by establishing a large number of open HTTP connections. The available documents do not specify the underlying cause...

LinkSys Wireless-G administrative access

Web administration interface is available from external network even if turned off administratively...

IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting

IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a...