Apache-SOAP Administrative Interface Detection

Binary data 4276.prm...

Design/Logic Flaw

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

CVE-2007-4375

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

CVE-2007-4375

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

diskeeper-disclose.txt

Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...

Vonage VoIP phones weak defaults

Administrative interface in available via WAN connection with username/password of user/user...

JBoss Application Server may not properly restrict access to the administrative interface

Overview The JBoss Application Server may allow unauthenticated, remote access to the administrative console. Description JBoss is an open source application server implemented in Java. Because it is Java-based, JBoss can be used on any operating system that supports Java. JBoss servers can be...

CVE-2007-0932: Undefined Security Weakness

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

Cisco VPN Concentrator Administrative Interface Detection

Binary data 3913.prm...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork:...

CVE-2006-5175: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors...

CVE-2006-5175

CVE-2006-5175 refers to a CSRF vulnerability in the administrative web interface of Buffalo TeraStation HD-HTGL. The flaw affects firmware versions prior to 2.05 beta 1, allowing remote attackers to cause configuration changes or data deletion via unspecified vectors when an administrator is auth...

Cisco Call Manager (VoIP) Administrative Interface Detection

Binary data 3770.prm...

Asterisk VoIP Administrative Interface Detection

Binary data 3769.prm...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Expl

Exploit for unknown platform in category remote exploits ==================================================================== RaidenHTTPD 1.1.49 SoftParserFileXml Remote Code Execution Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=on...

RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution

RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site:...

CVE-2006-3907

Siemens SpeedStream 2624 allows remote attackers to cause a denial of service device hang by sending a crafted packet to the web administrative interface...

CVE-2006-3907: Undefined Security Weakness

Siemens SpeedStream 2624 allows remote attackers to cause a denial of service device hang by sending a crafted packet to the web administrative interface...

Multiple Cisco Security Monitoring, Analysis and Response System security vulnerabilities

Default preconfigured Oracle databse account, JBoss code execution, multiple administrative interface code executions...

CVE-2006-2830

The CVE-2006-2830 entry describes a buffer-overflow vulnerability in the HTTP administrative interface of TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1. Remote attackers could trigger a denial of service and possibly execute arbitrary code via the HTTP...