phpBB 1.4 - SQL Query Manipulation

phpBB 1.4 - SQL Query Manipulation source: https://www.securityfocus.com/bid/3142/info phpBB is free, open-source, easy-to-use web forums software. An issue exists in phpBB which allows a remote attacker to manipulate SQL queries in such a way as to gain an administrative account with the service...

Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW)

Summary - New Tektronix Xerox printers have covered up a security through obscurity flaw discovered in November, 1999 with more security through obscurity. The unauthenticated and unfiltered administrator configuration page on the PhaserLink webserver is now located at the URL...

CVE-2001-0016

NTLM Security Support Provider NTLMSSP service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access...

CVE-2000-0191

The CVE-2000-0191 issue affects Axis StorPoint CD. A directory traversal vulnerability allows remote attackers to reach administrator URLs without authentication by exploiting a .. sequence, enabling an authentication bypass. The Nessus entry references a specific crafted URL path (e.g., /cd/../c...

Security bugs in nokia voyager, BO dev.

Voyager works with a multipurposes cgi called htmlpage that make a call to htmlgen with a filename as a template script. Htmlgen produce the final html page returned by apache. if u test this kind of url:...

Loading Rootkit using SystemLoadAndCallImage

Greets, For a while there has been a thread on NTBUGTRAQ about kernel-mode protection from rootkits. This is good - the whole point of our rootkit.com project is to get people thinking about the problem. For example, there is now an ANTI-Rootkit called Integrity Protection Driver from Pedestal...

Microsoft Windows Server 2000 - Named Pipes Predictability

source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...

@stake iKey 1000 Security Advisory

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: iKey 1000 Administrator Access and Data Compromise Release Date: July 20, 2000 Application: N/A Platform: Rainbow Technologies' iKey 1000 Severity: An attacker can login as administrator and access all...

Microsoft Windows SMB Registry : Winreg Registry Key Detection

The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg is missing. This key allows you to define what can be viewed in the registry by non administrators. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10431; scriptversion"$Revision: 1.31 $";...

CVE-1999-0549

The CVE-1999-0549 entry pertains to Windows NT, where the system automatically logs in an administrator upon reboot. Affected software: Windows NT. Vulnerability: administrative login occurs without user authentication at boot. Root cause and exact exploit vector are not detailed in the provided ...

Wired Community Software WWWThreads 5.0 - SQL Command Input

source: https://www.securityfocus.com/bid/967/info WWWThreads is a web bulletin board program that uses an SQL backend. Due to incomplete input validation, it is possible for an attacker to submit SQL commands through forms and manipulate the contents of the database to gain administrator...

CVE-1999-1508

Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as nclitems.html and nclsubjects.html...

CVE-1999-0376

CVE-1999-0376 involves a local privilege-escalation in Windows NT where an attacker can obtain administrator privileges by modifying the KnownDLLs list to reference malicious programs. The linked sources (Red Hat, NVD, CVE list) all describe the same vulnerability: local user access can be abused...

dpec-course-passwds.txt

Date: Fri, 15 Jan 1999 21:45:24 -0700 From: Joel Knight To: [email protected] Subject: DPEC Online Courseware DPEC's www.dpec.com Online Courseware has a nasty bug in it that allows anyone to change anyone elses password without knowing what their current password is. This is NOT limited to...

CVE-1999-0549

Windows NT automatically logs in an administrator upon rebooting...

Visual Studio 2022 Security Update (17.14.20)

This security update applies to all editions of Visual Studio 2022, and will update client machines on the Current channel to version 17.14.20. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the upda...