8738 matches found
CVE-2004-1898
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...
CVE-2004-1898
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...
[ Security Bulletin ] SSRT4699 rev.0 HP-UX SAM local privilege increase
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01104 REVISION: 0 SSRT4699 HP-UX SAM local privilege increase NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in this Security bulletin should...
CVE-2004-1375
Unknown vulnerability in System Administration Manager SAM in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges...
ASP Calendar Vulnerability <www.ashiyane.com>
www.ashiyane.com Release by AcTiOnSpIdEr [email protected] Advisory Name: ASP Calendar Vulnerability Release Date:13 December 2004 Platform:Any website using asp Calendar Severity:no password protected ! Overview : ---------- ASP Calendar is a tool written in aps to handle the administration...
zyxelreset.txt
Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...
Remote Execute vulnerable to denial-of-service
Overview Remote Execute cannot handle more than seven connections simultaneously. If more than seven connections are attempted, Remote Execute will crash, resulting in a denial-of-service condition. Description Remote Execute is a network administration tool for the Windows platform that allows...
CVE-2004-0611
Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service no new connections via a large number of open HTTP connections...
phpBB 1.0.02.0.10 - admin_cash.php Remote Code Execution
phpBB 1.0.02.0.10 - admincash.php Remote Code Execution / exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to your backdoor and the correct filename for your backdoor upload it to a webserver. gcc -o b4b0-phpbb b4b0-phpbb.c ./b4b0-phpbb telnet greets to b4b0 -- evilrab...
Router ZyXEL Prestige 650 HW http remote admin.
Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset
source: https://www.securityfocus.com/bid/11723/info ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP based...
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset source: https://www.securityfocus.com/bid/11723/info ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access ...
NetOp Products Detection (TCP)
This script detects if the remote system has a Danware NetOp program enabled and running on TCP. These programs are used for remote system administration, for telecommuting and for live online training. They also usually allow authenticated users to access the local system remotely. This NASL...
Mailtraq 2.x - Administration Console Privilege Escalation
source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the administration console interface to...
NetOp Products Detection (UDP)
This script detects if the remote system has a Danware NetOp program enabled and running on UDP. These programs are used for remote system administration, for telecommuting and for live online training. They also usually allow authenticated users to access the local system remotely. This NASL...
Mailtraq 2.x - Administration Console Privilege Escalation
Mailtraq 2.x - Administration Console Privilege Escalation source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local use...
Cisco IOS Telnet Service DoS (CSCef46191)
The remote router contains a version of IOS which has a flaw in the telnet service that could allow an attacker to disable the administation of the remote router by SSH, HTTP and telnet. CISCO identifies this vulnerability as bug id CSCef46191. An attacker may use this flaw to render this router...
dwc_articles possible sql injection
author: l0om site: www.excluded.org product: dwcarticles = 1.6 maybe other versions too problem: possible sql injection Vendor site? www.distinctwebcreations.com note:its currently down. Vendor status? Didnt find an email address or phon number. what is it? DwcArticles is an ASP application...
FreeBSD : wordpress -- XSS in administration panel (200)
The following package needs to be updated: wordpress %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg12b7b4cf1d5311d9814e0001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...