7731 matches found
phpBB 1.0.02.0.10 - admin_cash.php Remote Code Execution
phpBB 1.0.02.0.10 - admincash.php Remote Code Execution / exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to your backdoor and the correct filename for your backdoor upload it to a webserver. gcc -o b4b0-phpbb b4b0-phpbb.c ./b4b0-phpbb telnet greets to b4b0 -- evilrab...
Router ZyXEL Prestige 650 HW http remote admin.
Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset
source: https://www.securityfocus.com/bid/11723/info ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP based...
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset source: https://www.securityfocus.com/bid/11723/info ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access ...
NetOp Products Detection (TCP)
This script detects if the remote system has a Danware NetOp program enabled and running on TCP. These programs are used for remote system administration, for telecommuting and for live online training. They also usually allow authenticated users to access the local system remotely. This NASL...
NetOp Products Detection (UDP)
This script detects if the remote system has a Danware NetOp program enabled and running on UDP. These programs are used for remote system administration, for telecommuting and for live online training. They also usually allow authenticated users to access the local system remotely. This NASL...
Mailtraq 2.x - Administration Console Privilege Escalation
source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the administration console interface to...
Mailtraq 2.x - Administration Console Privilege Escalation
Mailtraq 2.x - Administration Console Privilege Escalation source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local use...
Cisco IOS Telnet Service DoS (CSCef46191)
The remote router contains a version of IOS which has a flaw in the telnet service that could allow an attacker to disable the administation of the remote router by SSH, HTTP and telnet. CISCO identifies this vulnerability as bug id CSCef46191. An attacker may use this flaw to render this router...
dwc_articles possible sql injection
author: l0om site: www.excluded.org product: dwcarticles = 1.6 maybe other versions too problem: possible sql injection Vendor site? www.distinctwebcreations.com note:its currently down. Vendor status? Didnt find an email address or phon number. what is it? DwcArticles is an ASP application...
FreeBSD : wordpress -- XSS in administration panel (200)
The following package needs to be updated: wordpress %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg12b7b4cf1d5311d9814e0001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
3CRADSL72 information leak
http://routerIP/appsta.stm Contains information with administration user name and password...
Multiple XSS Vulnerabilities in Wordpress 1.2
Vendor : Wordpress URL : http://wordpress.org/ Version : Wordpress 1.2 Risk : XSS Description: WordPress is a state-of-the-art semantic personal publishing platform with a focus on aesthetics, web standards, and usability. ... Go to http://wordpress.org/ for detailed information. Cross Site...
Debian DSA-185-1 : heimdal - buffer overflow
A stack-based buffer overflow in the kadmserwrapin function in the Kerberos v4 administration server was discovered, which is provided by Heimdal as well. A working exploit for this kadmind bug is already circulating, hence it is considered serious. The broken library also contains a vulnerabilit...
Debian DSA-183-1 : krb5 - buffer overflow
Tom Yu and Sam Hartman of MIT discovered another stack-based buffer overflow in the kadmserwrapin function in the Kerberos v4 administration server. This kadmind bug has a working exploit code circulating, hence it is considered serious. The MIT krb5 implementation includes support for version 4,...
Multiple MyWebServer bugs
DoS, administration interface protection bypass...
Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download
/ Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha, romhack Peter Winter-Smith, IsolationX, YpCat, Aria Giovanni, Ni...
wordpress -- XSS in administration panel
Pages in the administration panel of Wordpress are vulnerable for XSS attacks...
EmuliveVuln.txt
GulfTech Security Research September 20th, 2004 Vendor : Emulive Imaging Corporation URL : http://www.emulive.com Version : EmuLive Server4 Commerce Edition Build 7560 Risk : Multiple Vulnerabilities Description: Server4 is real-time media broadcasting software that works in conjunction with...
