8739 matches found
BEA WebLogic Server 8.1 WebLogic Express Administration Console - Cross-Site Scripting
BEA WebLogic Server 8.1 WebLogic Express Administration Console - Cross-Site Scripting source: https://www.securityfocus.com/bid/13400/info A remote cross-site scripting vulnerability affects BEA WebLogic Server and WebLogic Express administration console. This issue is due to a failure of the...
CVE-2001-1463: Undefined Security Weakness
The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...
Linksys WET11 - Password Update Remote Authentication Bypass
Linksys WET11 - Password Update Remote Authentication Bypass source: https://www.securityfocus.com/bid/13051/info A remote authentication bypass vulnerability affects Linksys WET11. This issue is due to a failure of the application to validate authentication credentials when processing password...
Linksys WET11 - Password Update Remote Authentication Bypass
source: https://www.securityfocus.com/bid/13051/info A remote authentication bypass vulnerability affects Linksys WET11. This issue is due to a failure of the application to validate authentication credentials when processing password change requests. An attacker may leverage this issue to...
CVE-2005-0768
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...
CVE-2005-0768: Undefined Security Weakness
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...
phpBBsession.txt
phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.txt ..located on "C:\Documents and...
GoodTech telnet server buffer overflow
Buffer overflow in web administration interface...
GoodTech Telnet Server < 5.0.7 Buffer Overflow Crash Exploit
Exploit for unknown platform in category dos / poc ============================================================ GoodTech Telnet Server include include int mainint argc, char argv SOCKET sock; struct sockaddrin sockaddr; WSADATA data; WORD p; p=MAKEWORD2,0; WSAStartupp,&data; int i, n, err; unsign...
GoodTech Telnet Server < 5.0.7 - Buffer Overflow Crash
/ GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professional sp2 operating system. This exploit connects to the...
GoodTech Telnet Server 5.0.7 - Buffer Overflow Crash
GoodTech Telnet Server 5.0.7 - Buffer Overflow Crash / GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professiona...
paNews 2.0b4 - Remote Admin Creation SQL Injection
paNews 2.0b4 - Remote Admin Creation SQL Injection / paNews v2.0b4 silePNEWSxpl This exploit utilize SQL injection for create a new user with admin privileges on paNews software system. References: packetstormsecurity.org/0503-exploits/panews.txt coded by: Silentium of Anacron Group Italy date:...
Mitel 3300 ICP IP PBX VOIP device Web session hijack
Predictable session id allos to hijack Web administration session...
phpMyAdmin Detection
The remote host is running phpMyAdmin, a web-based MySQL administration tool written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17219; scriptversion"1.29"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
[SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 Author: Maksymilian Arciemowicz cXIb8O3 Date: 24.2.2005 - --- 0.Description --- phpMyAdmin 2.6.1 is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently i...
cyclades alterpath manager 1.1 - Multiple Vulnerabilities
cyclades alterpath manager 1.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12649/info Cyclades AlterPath Manager is a network device designed to facilitate remote administration of all network-accessible infrastructure resources. Multiple remote vulnerabilities affect...
Multiple Gigafast EE400-R router vulnerabilities
DoS, configuration access including administration password in cleartext...
CVE-2004-1695
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...
CVE-2004-1695
CVE-2004-1695 affects EmuLive Server4 Commerce Edition Build 7560. The connected Nessus entry discloses a concrete vulnerability in the administrative interface: a remote attacker can bypass authentication by requesting the page "/public/admin/index.htm" directly, effectively gaining administrati...
CVE-2004-1695: Undefined Security Weakness
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...