33 matches found
CVE-2021-20716
Hidden functionality in multiple Buffalo network devices BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54...
CVE-2021-20716: Undefined Security Weakness
Hidden functionality in multiple Buffalo network devices BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54...
Information disclosure
Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile default $HOME/.config/Yubico/u2fkeys as root unless openasuser was enabled, and does not properly verify that the path lacks symlinks pointing to other files on the system owned by root. If the debug option is enabled in the PAM...
CVE-2016-7824
Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...
CVE-2016-7824
Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...
CVE-2016-7824: Improper Access Control
Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...
PageKit 1.0.10 Password Reset
Exploit Title: Remote PageKit Password Reset Vulnerability Date:a21-01-2017 Software Link: http://pagekit.com/ Exploit Author: Saurabh Banawar from SecureLayer7a Contact: http://twitter.com/asecurelayer7 Website: httpas://securelayer7.neta Category: webapps 1. Description Anyremote user can reset...
WNC01WH vulnerable to enabling debug option
Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains an enabling debug option vulnerability. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...
GetEngine.pl - скрипт для определения имени\версии движка
Написал на PERL'е работает по локальной базе base.getEngine в базе более 70 движков запуск: ./ge.pl site.com запуск с подробной инфой: ./ge.pl site.com -debug Код: ./ge.pl rdot.org/forum/ GetEngine v0.1 eLwauxc2009 Found Engine: vBulletin version 3.8.5 clientscript/vbulletinglobal.js Код: ./ge.pl...
CVE-2004-1332: Undefined Security Weakness
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v debug option enabled, allows remote attackers to execute arbitrary code via a long command request...
CVE-1999-1309
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug -d command line option...
CVE-2000-0370
CVE-2000-0370 affects Caldera Linux smail. The debug option allows remote command execution via shell metacharacters in the -D option for rmail, enabling full compromise of confidentiality, integrity, and availability (CVSSv2 base score 10.0). Exploitation details are not provided in the availabl...