CVE-2010-4733

CVE-2010-4733 and related entries describe default-credential and remote-authenticated risks affecting Intellicom NetBiter NetSCADA WebSCADA components (WS100/WS200, EC150, MB100, SS100 on NB100/NB200). The root issue cited is default usernames/passwords allowing superadmin access via the web int...

CVE-2010-4731

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

CVE-2010-4730

CVE-2010-4730, CVE-2010-4731, CVE-2010-4732, CVE-2010-4733 describe security issues in WebSCADA NetBiter NB100/NB200 platforms (WS100/WS200, EC150, MB100, SS100). All relate to the same product family and involve cgi-bin/read.cgi vulnerabilities that allow traversal or manipulation of files when ...

CVE-2010-4732

CVE-2010-4732 affects WebSCADA WS100/WS200, Easy Connect EC150, Modbus RTU-TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100/NB200 platforms. The vulnerability is in cgi-bin/read.cgi and lets remote authenticated administrators replace the logo page GIF via a co...

CVE-2010-4730

Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

XM Easy Personal FTP Server 5.8.0 (TYPE) Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP3 French...

XM Easy Personal FTP Server 5.8.0 - TYPE Denial of Service

XM Easy Personal FTP Server 5.8.0 - TYPE Denial of Service !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP...

Unkn0wnV1rus said - Indian Reserve Bank is Venerable and easy to hack !

Unkn0wnV1rus said - Indian Reserve Bank is Venerable and easy to hack ! Hello Friends, Last night I got a email from "Unkn0wnV1rus" . He/she submit us a news about "Venerability of Indian Reserve Bank's website" . He claim that he have access to server . Purpose of publishing this news is just to...

MHP Downloadshop SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : MHP Downloadshop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : MHP Downloadshop +Demo...

Easy Online Shop SQL Injection Vulnerability

Exploit for php platform in category web applications...

Immo Makler Script SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concatversion...

Immo Makler Script SQL Injection

----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concatversion ,7,8,9+from+user--...

Easy Online Shop SQL Injection

----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/ +Price : 8,90 € +Language : PHP...

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for administration of Mikrotik, Cisco, Chillispot and StarOS routers and...

Easy Online Shop - SQL Injection

Easy Online Shop - SQL Injection ----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/...

Easy Online Shop - SQL Injection

----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/ +Price : 8,90 € +Language : PHP...

MHP Downloadshop - SQL Injection

----------------------------Information------------------------------------------------ +Name : MHP Downloadshop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : MHP Downloadshop +Demo...

Immo Makler Script - SQL Injection

Immo Makler Script - SQL Injection ----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concat...

MHP Downloadshop - SQL Injection

MHP Downloadshop - SQL Injection ----------------------------Information------------------------------------------------ +Name : MHP Downloadshop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : MHP Downloadshop +Demo...

Immo Makler Script - SQL Injection

----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concatversion ,7,8,9+from+user--...