CVE-2007-2040

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192...

Hardcoded credentials

Cisco Wireless Control System WCS before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014...

CVE-2007-2032

Cisco Wireless Control System WCS before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014...

CVE-2007-2032

Cisco Wireless Control System (WCS) prior to 4.0.96.0 contains a hard-coded FTP username and password used for backup operations. This credential flaw can allow remote attackers to read and modify arbitrary files via unspecified vectors related to the FTP server’s properties (Bug CSCse93014). The...

CVE-2007-2040

This CVE (CVE-2007-2040) affects Cisco Aironet 1000/1500 Lightweight Access Points, with hard-coded credentials allowing an attacker with physical access to perform arbitrary actions on the device. Affected firmware versions are before 3.2.185.0 for 1000/1500 lightweight APs and before 4.0.206.0 ...

CVE-2007-2040

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192...

CVE-2007-2032

Cisco Wireless Control System WCS before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014...

Maian Weblog v3.1

--------------------------------------------------------------------------------------------------------------------------------------------------------------- ScRipt Name : Maian Weblog v3.1 Download : http://www.maianscriptworld.co.uk/freestuff1975weblog.html Coded by : KaRTaL Contact :...

ScarNews 1.2.1 (sn_admin_dir) Local File Inclusion Exploit

No description provided by source. Perl BeyazKurt ScarNews snadmindir Local File Inclusion Exploit D0rk : "Powered by ScarNews v1.2.1" dorka gerenk yok ama nese :p kodlad...m 2 scriptte di.er makinayla uctu : : Str0ke 鼁me kendini olur b鰈e .eler : Download :...

Microsoft Windows Explorer - '.ANI' File Denial of Service

/ MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu / include "stdio.h" include "stdlib.h" unsigned char Aniheaders =...

ScarNews 1.2.1 - 'sn_admin_dir' Local File Inclusion

Perl BeyazKurt ScarNews snadmindir Local File Inclusion Exploit D0rk : "Powered by ScarNews v1.2.1" dorka gerenk yok ama nese :p kodlad...m 2 scriptte di.er makinayla uctu : : Str0ke üzme kendini olur böle .eler : Download : http://www.scar4u.de/scripts/scarnews/download.html Coded by elden ele...

IrfanView 3.99 - .ani Local Buffer Overflow (1)

IrfanView 3.99 - .ani Local Buffer Overflow 1 / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Ha...

IBM Lotus Domino Server 6.5 - Remote Overflow

IBM Lotus Domino Server 6.5 - Remote Overflow !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton...

CVE-2006-7142

The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files, which allows attackers to recover the keys from the configuration files and decrypt the disk drive...

PT-2007-1420 · Utimaco · Utimaco Safeguard

Name of the Vulnerable Software and Affected Versions: Utimaco Safeguard affected versions not specified Description: The centralized management feature of Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files. This allows attackers to...

CVE-2007-1063

Cisco Unified IP Phone models 7906G/7911G/7941G/7961G/7970G/7971G running firmware 8.0(4)SR1 and earlier have a hard-coded SSH credential issue in the SSH server that lets remote attackers access the device. Connected sources (NVD, Tenable, PRION, CVE lists) confirm the root cause as embedded cre...

CVE-2007-1063

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...

DotClear v1.2.5

DotClear v1.2.5 = RFi Vulnerabilities KaRTaL Download : http://www.spacemarc.it/scriptphp/index.php?script=meganoidesnews111 Script Name : DotClear v1.2.5 Coded By : KaRTaL Contact : k4rtalatgmaildotcom V.Code in : path/index.php require $blogdcpath.'/layout/append.php'; Exploit :...

VS-Link-Partner 2.1 - script_pfad Remote File Inclusion

VS-Link-Partner 2.1 - scriptpfad Remote File Inclusion VS-Link-Partner //'=============================================================================================== //'Script Name: VS-Link-Partner //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey...

Multiple Printer Providers (Spooler Service) - Local Privilege Escalation

/Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website: http://www.514.es This code should allow to gain SYSTEM privileges with the following...