CVE-2005-0768: Undefined Security Weakness

Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...

phpBBsession.txt

phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.txt ..located on "C:\Documents and...

GoodTech telnet server buffer overflow

Buffer overflow in web administration interface...

GoodTech Telnet Server < 5.0.7 Buffer Overflow Crash Exploit

Exploit for unknown platform in category dos / poc ============================================================ GoodTech Telnet Server include include int mainint argc, char argv SOCKET sock; struct sockaddrin sockaddr; WSADATA data; WORD p; p=MAKEWORD2,0; WSAStartupp,&data; int i, n, err; unsign...

GoodTech Telnet Server < 5.0.7 - Buffer Overflow Crash

/ GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professional sp2 operating system. This exploit connects to the...

GoodTech Telnet Server 5.0.7 - Buffer Overflow Crash

GoodTech Telnet Server 5.0.7 - Buffer Overflow Crash / GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professiona...

paNews 2.0b4 - Remote Admin Creation SQL Injection

paNews 2.0b4 - Remote Admin Creation SQL Injection / paNews v2.0b4 silePNEWSxpl This exploit utilize SQL injection for create a new user with admin privileges on paNews software system. References: packetstormsecurity.org/0503-exploits/panews.txt coded by: Silentium of Anacron Group Italy date:...

Mitel 3300 ICP IP PBX VOIP device Web session hijack

Predictable session id allos to hijack Web administration session...

phpMyAdmin Detection

The remote host is running phpMyAdmin, a web-based MySQL administration tool written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17219; scriptversion"1.29"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

[SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 Author: Maksymilian Arciemowicz cXIb8O3 Date: 24.2.2005 - --- 0.Description --- phpMyAdmin 2.6.1 is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently i...

cyclades alterpath manager 1.1 - Multiple Vulnerabilities

cyclades alterpath manager 1.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12649/info Cyclades AlterPath Manager is a network device designed to facilitate remote administration of all network-accessible infrastructure resources. Multiple remote vulnerabilities affect...

Multiple Gigafast EE400-R router vulnerabilities

DoS, configuration access including administration password in cleartext...

CVE-2004-1695

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...

CVE-2004-1695

CVE-2004-1695 affects EmuLive Server4 Commerce Edition Build 7560. The connected Nessus entry discloses a concrete vulnerability in the administrative interface: a remote attacker can bypass authentication by requesting the page "/public/admin/index.htm" directly, effectively gaining administrati...

CVE-2004-1695: Undefined Security Weakness

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...

CVE-2004-1540

ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file...

CVE-2004-1526

CVE-2004-1526 affects Hired Team: Trial 2.0 and earlier and 2.200; the description indicates no restriction on kicking other players, including administrators, on the game server. Root cause: missing or misconfigured access control that allows arbitrary kicks. Impact: potential disruption of serv...

CVE-2004-1540

CVE-2004-1540 affects ZyXEL Prestige routers (623, 650, 652) where HTTP Remote Administration is enabled. The vulnerability exists because access to the page “/rpFWUpload.html” does not require authentication, enabling a remote attacker to reset the router configuration to its factory state. Docu...

HP-UX PHCO_28125 : HP-UX Running System Administration Manager (SAM), Local Elevation of Privilege (HPSBUX01104 SSRT4699 rev.3)

s700800 11.00 cumulative SAM/ObAM patch : A potential security vulnerability has been identified with System Administration Manager SAM running on HP-UX that may allow local unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...

HP-UX PHSS_31817 : HP-UX Running System Administration Manager (SAM), Local Elevation of Privilege (HPSBUX01104 SSRT4699 rev.3)

s700800 11.23 ObAM Patch : A potential security vulnerability has been identified with System Administration Manager SAM running on HP-UX that may allow local unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...