CVE-2013-0215

oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service daemon crash and host-control outage, or memory consumption or obtain sensitive control-plane data by...

[USN-1750-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1750-1 February 26, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Oracle Application Express (Apex) Administration Interface is Accessible

In production environments, the Apex Administration and Builder applications should be disabled to prevent administrator or developer access to the instance via a web browser. ------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Look for...

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

SuSE Update for XEN openSUSE-SU-2012:1572-1 (XEN)

Check for the Version of XEN OpenVAS Vulnerability Test $Id: gbsuse201215721.nasl 8336 2018-01-09 07:01:48Z teissa $ SuSE Update for XEN openSUSE-SU-2012:1572-1 XEN Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CVE-2012-1602

user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...

Authentication flaw

user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...

CVE-2012-1602

CVE-2012-1602 affects NextBBS 0.6: a vulnerability in user.php allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1. This is an authentication bypass in the web app, enabling privilege escalation without user interaction beyond manipula...

CVE-2012-1602

user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...

Conceptronic Authentication Bypass

Conceptronic Grab’n’Go Network Storage and Sitecom Home Storage Center - Authentication Bypass Vulnerability in - AA-001 Severity Rating: High Discovery Date: May 5, 2012 Vendor Notification: May 31, 2012 =Impact - System Access - Exposure of sensitive information =Severity Rating Alcyon rates th...

PT-2012-4697 · Htcondor · Condor

Name of the Vulnerable Software and Affected Versions: Condor versions prior to 7.8.2 Description: The issue allows remote attackers to bypass host-based authentication and execute certain actions, such as ALLOW ADMINISTRATOR or ALLOW WRITE, by connecting from a system with a spoofed reverse DNS...

Alpha Networks ADSL2/2+ Wireless Router ASL-26555 - Password Disclosure

Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject: http://a0rtega.pentbox.net/files/asl-26555-zombie.jpg - Summary: Alpha...

Siemens COMOS Database Privilege Escalation Vulnerability

Overview Siemens has reported a privilege escalation vulnerability in the Siemens COMOS database application. Siemens has produced an update that fixes this vulnerability. This vulnerability could be exploited remotely. Affected Products Siemens reports that the vulnerability affects the followin...

Credential Bypass Vulnerability

A vulnerability exists whereby an unauthenticated user can get administrator access to the device via the web management UI without supplying credentials. Ref 37034 This vulnerability can result in total compromise of the device. This issue affects PAN-OS 4.1.3 and earlier; PAN-OS 4.0.9 and...

CVE-2012-2402

wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors...

Joomla! 1.5.x可预测密码生成和信息泄露漏洞

Bugtraq ID: 52750 Joomla!是基于php+mysql模式的快速建站系统 Joomla!存在安全漏洞，允许攻击者获得敏感信息或绕过安全限制 -密码生成算法存在错误可生成可猜测密码，通过密码重置功能可猜测生成的密码信息。 -存在一个不充分权限检查错误，可被利用获得管理员后端的部分敏感信息 0 Joomla! 1.5.x 厂商解决方案 Joomla! 1.5.26已经修复此漏洞，建议用户下载使用： http://www.joomla.org/...

GitHub hacked with Ruby on Rails public key vulnerability

GitHub hacked with Ruby on Rails public key vulnerability Github, the service that many professional programmers use to store their work and collaborate on coding, was hacked over the weekend. A young Russian developer Egor Homakov exploited a gaping vulnerability in GitHub that allowed him or...

Drupal 7.12 - Multiple Vulnerabilities

Drupal 7.12 - Multiple Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Drupal CMS 7.12 latest stable release Multiple Vulnerabilities Date : 02-03-2012 Author :...

Rockwell Automation PLC HTTP Server Administrator Access Detection (SCADA)

Binary data 6285.prm...

CA Arcserve D2D GWT RPC Credential Information Disclosure

$Id: caarcserverpcauthbypass.rb 13467 2011-08-01 21:20:29Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...