CVE-2004-1540

ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file...

CVE-2004-2729

Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections...

CVE-2004-1898

Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...

CVE-2004-1898

Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...

[ Security Bulletin ] SSRT4699 rev.0 HP-UX SAM local privilege increase

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01104 REVISION: 0 SSRT4699 HP-UX SAM local privilege increase NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in this Security bulletin should...

CVE-2004-1375

Unknown vulnerability in System Administration Manager SAM in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges...

ASP Calendar Vulnerability <www.ashiyane.com>

www.ashiyane.com Release by AcTiOnSpIdEr [email protected] Advisory Name: ASP Calendar Vulnerability Release Date:13 December 2004 Platform:Any website using asp Calendar Severity:no password protected ! Overview : ---------- ASP Calendar is a tool written in aps to handle the administration...

zyxelreset.txt

Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...

Remote Execute vulnerable to denial-of-service

Overview Remote Execute cannot handle more than seven connections simultaneously. If more than seven connections are attempted, Remote Execute will crash, resulting in a denial-of-service condition. Description Remote Execute is a network administration tool for the Windows platform that allows...

CVE-2004-0611

Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service no new connections via a large number of open HTTP connections...

phpBB 1.0.02.0.10 - admin_cash.php Remote Code Execution

phpBB 1.0.02.0.10 - admincash.php Remote Code Execution / exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to your backdoor and the correct filename for your backdoor upload it to a webserver. gcc -o b4b0-phpbb b4b0-phpbb.c ./b4b0-phpbb telnet greets to b4b0 -- evilrab...

Router ZyXEL Prestige 650 HW http remote admin.

Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...

ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset

source: https://www.securityfocus.com/bid/11723/info ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP based...

ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset

ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset source: https://www.securityfocus.com/bid/11723/info ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access ...

Mailtraq 2.x - Administration Console Privilege Escalation

source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the administration console interface to...

NetOp Products Detection (TCP)

This script detects if the remote system has a Danware NetOp program enabled and running on TCP. These programs are used for remote system administration, for telecommuting and for live online training. They also usually allow authenticated users to access the local system remotely. This NASL...

NetOp Products Detection (UDP)

This script detects if the remote system has a Danware NetOp program enabled and running on UDP. These programs are used for remote system administration, for telecommuting and for live online training. They also usually allow authenticated users to access the local system remotely. This NASL...

Mailtraq 2.x - Administration Console Privilege Escalation

Mailtraq 2.x - Administration Console Privilege Escalation source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local use...

Cisco IOS Telnet Service DoS (CSCef46191)

The remote router contains a version of IOS which has a flaw in the telnet service that could allow an attacker to disable the administation of the remote router by SSH, HTTP and telnet. CISCO identifies this vulnerability as bug id CSCef46191. An attacker may use this flaw to render this router...

dwc_articles possible sql injection

author: l0om site: www.excluded.org product: dwcarticles = 1.6 maybe other versions too problem: possible sql injection Vendor site? www.distinctwebcreations.com note:its currently down. Vendor status? Didnt find an email address or phon number. what is it? DwcArticles is an ASP application...