DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...

ZYXEL P-330W - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27024/info ZyXEL P-330W 802.11g Secure Wireless Internet Sharing Router is prone to multiple cross-site scripting vulnerabilities and cross-site request-forgery vulnerabilities because it fails to properly sanitize user-supplied input. These issues affect...

CVE-2007-5830

Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server MSS 3.1 before SP1, and Message Networking MN 3.1, allows remote attackers to cause a denial of service via unspecified vectors related to "input validation."...

Input validation

Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server MSS 3.1 before SP1, and Message Networking MN 3.1, allows remote attackers to cause a denial of service via unspecified vectors related to "input validation."...

CVE-2007-5830

Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server MSS 3.1 before SP1, and Message Networking MN 3.1, allows remote attackers to cause a denial of service via unspecified vectors related to "input validation."...

Apache-SOAP Administrative Interface Detection

Binary data 4276.prm...

Design/Logic Flaw

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

CVE-2007-4375

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

CVE-2007-4375

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

diskeeper-disclose.txt

Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...

Vonage VoIP phones weak defaults

Administrative interface in available via WAN connection with username/password of user/user...

JBoss Application Server may not properly restrict access to the administrative interface

Overview The JBoss Application Server may allow unauthenticated, remote access to the administrative console. Description JBoss is an open source application server implemented in Java. Because it is Java-based, JBoss can be used on any operating system that supports Java. JBoss servers can be...

CVE-2007-0932: Undefined Security Weakness

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

Cisco VPN Concentrator Administrative Interface Detection

Binary data 3913.prm...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork:...

CVE-2006-5175: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors...

CVE-2006-5175

CVE-2006-5175 refers to a CSRF vulnerability in the administrative web interface of Buffalo TeraStation HD-HTGL. The flaw affects firmware versions prior to 2.05 beta 1, allowing remote attackers to cause configuration changes or data deletion via unspecified vectors when an administrator is auth...

Cisco Call Manager (VoIP) Administrative Interface Detection

Binary data 3770.prm...

Asterisk VoIP Administrative Interface Detection

Binary data 3769.prm...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Expl

Exploit for unknown platform in category remote exploits ==================================================================== RaidenHTTPD 1.1.49 SoftParserFileXml Remote Code Execution Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=on...