379 matches found
[SECURITY] Fedora 20 Update: php-horde-kronolith-4.2.4-1.fc20
Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management iCalendar/iTip, free/busy management, resource management,...
WordPress Busy Bee Theme - Remote Code Execution
There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...
Rosewill RSVA11001 - Remote Command Injection
No description provided by source. I have been hacking on a Rosewill RSVA11001 for a while now, something to suck up my free time. I had pulled apart the firmware previously but did not succeed in finding a way to get a shell on the device. The box is Hi3515 based, I found an exploit for another...
RedHat Update for evolution RHSA-2013:1540-02
Check for the Version of evolution OpenVAS Vulnerability Test RedHat Update for evolution RHSA-2013:1540-02 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
NetGear router through command injection to obtain ROOT privileges[EXP]-vulnerability warning-the black bar safety net
! NetGear router through command injection to obtain ROOT privileges\EXP\ - ScriptALeRT - Minghacker /Article/UploadPic/2013-11/201311614443412.jpg Abroad a large cattle study found that the NetGear router wndr3700v4 firmware authenticate the existence of the vulnerability. Once the Web interface...
Rosewill RSVA11001 - Remote Command Injection
I have been hacking on a Rosewill RSVA11001 for a while now, something to suck up my free time. I had pulled apart the firmware previously but did not succeed in finding a way to get a shell on the device. The box is Hi3515 based, I found an exploit for another similar box Ray Sharp but it did no...
Rosewill RSVA11001 Remote Code Execution
I have been hacking on a Rosewill RSVA11001 for a while now, something to suck up my free time. I had pulled apart the firmware previously but did not succeed in finding a way to get a shell on the device. The box is Hi3515 based, I found an exploit for another similar box Ray Sharp but it did no...
Alt-N MDaemon's WorldClient Username Enumeration Vulnerability
==================================================================== Alt-N MDaemon's WorldClient Username Enumeration Vulnerability ==================================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/ Vuln Type:...
sip-call-spoof NSE Script
Spoofs a call to a SIP phone and detects the action taken by the target busy, declined, hung up, etc. This works by sending a fake sip invite request to the target phone and checking the responses. A response with status code 180 means that the phone is ringing. The script waits for the next...
Scada Modbus Slave Device Busy Exception Code Delay
...
bbPress v1.0.2 Cross-Site Request Forgery
Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...
Microsoft Windows SMB NT Trans2请求远程拒绝服务及代码执行漏洞（MS09-001）
BUGTRAQ ID: 33122 CVECAN ID: CVE-2008-4835 Windows是微软发布的非常流行的操作系统。 Microsoft服务器消息块（SMB）协议软件处理特制SMB数据包的方式存在安全漏洞，未经认证的远程攻击者可以在NT Trans2请求中指定畸形的值导致内核忙碌，必须重启系统才能恢复操作。利用此漏洞的大多数尝试会导致系统拒绝服务，但是远程执行代码在理论上是可行的。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows...
Sun Solaris ATA 磁盘驱动IOCTL本地拒绝服务漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 ata7D磁盘驱动的某些ioctl2函数中的安全漏洞可能允许本地非特权用户导致系统忙碌，造成拒绝服务的情况。 如果出现了上述漏洞，系统会变得忙碌，生成类似于以下的栈追踪： 32位i386系统： atadiskioctl+0x16f dadkioctl+0x1d7 cmdkioctl+0x361 cdevioctl+0x2b specioctl+0x62 fopioctl+0x24 ioctl+0x199 syssysenter+0x101 64位i386系统： atadiskioctl+0x14c...
Multiple Denial of Service attacks possible for Webspeed OpenEdge
Denial of Service attack against OpenEdge WebSpeed possible through dict.r. 11-5-2007 author: Eelko Neven discovered: 9-5-2007 Because of poor security in dict.r it is possible to put all agents in busy mode. First you have to find the messenger execution url. For example:...
Disable website access for sites running Webspeed
edit.r Busy agents exploit. 1-5-2007 author: Eelko Neven discovered: 28-4-2007 tested: Windows 2000 server & Windows 2003 server Because of poor security in edit.r it is possible to put all agents in busy mode. First you have to find the messenger execution url. For example:...
Busy Box web server directory traversal
Directory traversal with /2e2e...
glibc, nptl, nscd security update
CentOS Errata and Security Advisory CESA-2005:256 Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by...
