CVE-2009-2765

httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI...

CVE-2009-2765

The DD-WRT firmware (versions 24 sp1 and others before build 12533 ) is vulnerable to a remote command injection flaw in the httpd.c component of the management GUI. The root cause is a failure to adequately sanitize user-supplied input data, allowing unauthenticated attackers to execute arbitrar...

CVE-2009-2765: Improper Input Validation

httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI...

PT-2009-5129

Name of the Vulnerable Software and Affected Versions DD-WRT versions prior to build 12533 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a "cgi-bin/" URI. This is due to a problem in the httpd.c in httpd in the management GUI...

linux/x86 /bin/sh polymorphic shellcode 48 bytes

No description provided by source. / Title: Polymorphic Shellcode /bin/sh - 48 bytes Author: Jonathan Salwan Mail: submit ! shell-storm.org ! DataBase of shellcode : http://www.shell-storm.org/shellcode/ Original Informations ===================== Disassembly of section .text: 08048060 .text:...

linux/x86 /bin/sh polymorphic shellcode 48 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 /bin/sh polymorphic shellcode 48 bytes ================================================ / Title: Polymorphic Shellcode /bin/sh - 48 bytes Author: Jonathan Salwan Original Informations...

linux/x86 - /bin/sh polymorphic shellcode 48 bytes

linux/x86 /bin/sh polymorphic shellcode 48 bytes. Shellcode exploit for linx86 platform / Title: Polymorphic Shellcode /bin/sh - 48 bytes Author: Jonathan Salwan Mail: submit ! shell-storm.org ! DataBase of shellcode : http://www.shell-storm.org/shellcode/ Original Informations...

CVE-2009-2367: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the sessionid parameter...

CVE-2009-2322

The CVE-2009-2322 entry concerns the Axesstel MV 410R router. A vulnerability in the CGI script cgi-bin/sysconf.cgi enables cross-site scripting (XSS), allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics indicate a Medium severity (CVSS v2: AV...

CVE-2009-2321: Undefined Security Weakness

cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service configuration reset via a RESTORE=RESTORE query string...

CVE-2009-2322: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2323: Cross-Site Request Forgery (CSRF)

The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery CSRF attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script...

CVE-2009-2256: Improper Input Validation

The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...

CVE-2009-2258: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...

System V Derived /bin/login Extraneous Arguments Buffer Overflow

This exploit connects to a system's modem over dialup and exploits a buffer overflow vulnerability in it's System V derived /bin/login. The vulnerability is triggered by providing a large number of arguments. This module requires Metasploit: https://metasploit.com/download Current source:...

Unfixed XSS vulnerability at usr-bin-mom.com

Security researcher skathgh420, has submitted on 17/06/2009 a cross-site-scripting XSS vulnerability affecting usr-bin-mom.com, which at the time of submission ranked 5777339 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34 bytes

linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34 bytes. Shellcode exploit for linx86 platform / linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34byte universal shellcode blue9057 [email protected] / int main char shellcode="\x6a\x31\x58\x99\xcd\x80\x89\xc3\x89\xc1\x6a\x46"...

CVE-2009-2013: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bin/apsbrowsesources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the sourceclass parameter in a browseclasses action...

Solaris Update for usr/bin/mail 111874-09

Check for the Version of usr/bin/mail OpenVAS Vulnerability Test Solaris Update for usr/bin/mail 111874-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/ftp 108900-04

Check for the Version of /usr/bin/ftp OpenVAS Vulnerability Test Solaris Update for /usr/bin/ftp 108900-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...