Joomla Component com_otzivi Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comotzivi Blind SQL Injection Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : By.Danger,D3xer,LionTurk and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : comotzivi Bug Typ...

Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability

Document Title: =============== Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1224 Release Date: ============= 2014-03-10 Vulnerability Laboratory ID VL-ID: ====================================...

Security Advisory-A DoS Vulnerability in the SSH Module on Huawei AR Router

On Some Huawei AR routers that receive a large number of SSH authentication attack packets with malformed data, legitimate users fail to log in through SSH. Attackers can construct massive attack packets to cause the AR routers to deny SSH login from legitimate users. HWPSIRT-2013-1255. This...

CVE-2012-6570

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remot...

CVE-2012-6571

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

Stack overflow

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

CVE-2012-6569

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

CVE-2012-6571

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2012-6569

CVE-2012-6569 describes a stack-based buffer overflow in the HTTP module of Huawei AR routers and related S-series switches (S2000, S3000, S3500, S3900, S5100, S5600, S7800, S8500) that allows remote attackers to execute arbitrary code via a long URI. The issue affects the HTTP component used for...

CVE-2012-6570

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remot...

CVE-2012-4960

CVE-2012-4960 covers a DES-based password encryption weakness in Huawei networking devices (including NE5000E, NE40E/80E, CX/ CX600, and related models). The root cause is use of DES for stored passwords, enabling brute-force or context-dependent attacks to recover cleartext passwords. Public adv...

CVE-2012-6569

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

CVE-2013-4632

CVE-2013-4632 affects Huawei Access Router (AR) before V200R002SPC003. A remote attacker can cause a denial of service (device reset) by sending a crafted field in a DHCP request, with the attack demonstrated from an IP phone. The NVD CVSS v2 base score is 7.8 (HIGH), indicating a network-exploit...

CVE-2012-6571

The CVE-2012-6571 issue affects Huawei devices (AR routers and S-series switches: S2000, S3000, S3500, S3900, S5100, S5600, S7800). The HTTP module in the BIMS/web management components uses predictable Session ID values, enabling remote attackers to hijack sessions via brute-force. This is docum...

CVE-2013-4630

CVE-2013-4630 describes a stack-based buffer overflow affecting Huawei AR series routers (AR 150, 200, 1200, 2200, 3200) when SNMPv3 debugging is enabled. The vulnerability allows remote attackers to execute arbitrary code via malformed SNMPv3 requests. Documents do not provide explicit exploit d...

CVE-2012-6570

The CVE-2012-6570 entry concerns Huawei AR routers and related Huawei S-series switches (S2000, S3000, S3500, S3900, S5100, S5600, S7800, S8500) where the HTTP module fails to validate that incoming data length respects the Content-Length header. This vulnerability in the HTTP module of both the ...

Fedora Update for libarchive FEDORA-2013-4537

Check for the Version of libarchive OpenVAS Vulnerability Test Fedora Update for libarchive FEDORA-2013-4537 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for mingw-libarchive FEDORA-2013-4592

Check for the Version of mingw-libarchive OpenVAS Vulnerability Test Fedora Update for mingw-libarchive FEDORA-2013-4592 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

SQL Injection

ActiveRecord-JDBC-Adapter AR-JDBC contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the sql.gsub function in lib/arjdbc/jdbc/adapter.rb not properly sanitizing user-supplied input before using it in SQL queries. This may allow a remote attacker to inject or...

ASMAX AR 1004g Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: ASMAX AR 1004g Authentication Bypass Date: 30.01.2013 Exploit Author: lucyoa Vendor Homepage: asmax.pl ASMAX AR 1004g is the most popular router device from asmax. ------------------- Device Info --------------------------...