BadTunnel: Cross-Segment hijacking the broadcast Protocol-vulnerability warning-the black bar safety net

! 0x00 introduction This paper proposes a new attack model, can cross network segment hijacking the TCP/IP broadcast Protocol, we named it“BadTunnel” in. Using this method, you can achieve cross-subnet NetBIOS Name Service Spoofing attacks. Both the attacker and the user are in the same network...

EasyDynamicPages 1.0 config_page.php Remote PHP File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9338/info EasyDynamicPages is prone to a remote file include vulnerability in a configuration script. This will permit a remote attack to include malicious PHP scripts from remote servers, which will then be executed by t...

Cisco Unified Computing System Fabric Interconnect Devices Arbitrary Command Execution Vulnerability

A vulnerability in the initial setup script of Cisco Unified Computing System fabric interconnect devices could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to unfiltered input in the initial configuration...

DSA-1639-1 twiki - command execution

Bulletin has no description...

TWiki 4.2.0 - configure Remote File Disclosure

TWiki 4.2.0 - configure Remote File Disclosure TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian newbies!!! :p" - Th1nk3r Info ---------------------------------------------------------------------------------------------------------------- Classe : Input Validation Error Remote : Yes...

CVE-2004-0128

CVE-2004-0128 affects PhpGedView (GEDCOM configuration script) up to version 2.65.1. The vulnerability arises when PGV_BASE_DIRECTORY is set to reference a URL on a remote server, allowing remote attackers to execute arbitrary PHP code by loading a malicious theme.php. The connected records corro...

CVE-2004-0128: Undefined Security Weakness

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGVBASEDIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script...

gatos privilege escalation

Under certain conditions xatitv runs configuration script with root privileges...

EasyDynamicPages 1.0 - config_page.php PHP Remote File Inclusion

EasyDynamicPages 1.0 - configpage.php PHP Remote File Inclusion source: https://www.securityfocus.com/bid/9338/info EasyDynamicPages is prone to a remote file include vulnerability in a configuration script. This will permit a remote attack to include malicious PHP scripts from remote servers,...

CVE-1999-1546

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable...

CVE-2000-1057

CVE-2000-1057 : Vulnerabilities in the database configuration scripts of HP OpenView Network Node Manager (NNM) 6.1 and earlier allow local users to gain privileges, potentially via insecure permissions. The public documents do not specify affected versions beyond 6.1 and earlier, nor provide exp...

netstation.navio.comm-rte.txt

Date: Fri, 29 Jan 1999 21:43:51 PST From: Ryan McRonald To: [email protected] Subject: TROJAN: netstation.navio-comm.rte 1.1.0.1 While configuring some IBM Network Station 300s I noticed that my /tmp directory had become NFS exported and world read/writeable!! I traced this to one of the...