790 matches found
Cisco IOS tacacs Keyword ACL Bypass (CSCdi36962)
The remote device seems to be vulnerable to a flaw in IOS when the keyword 'tacacs-ds' or 'tacacs' is being used in extended ACLs. This bug can, under very specific circumstances and only with certain IP host implementations, allow unauthorized packets to circumvent a filtering router. This...
Microsoft IIS ASP Redirection Function XSS
The remote host contains an ASP.NET installation that is affected by a cross-site scripting vulnerability. An attacker can exploit this issue to execute arbitrary HTML or script code in a user's browser within the security context of the affected site. %NASLMINLEVEL 70300 C Tenable Network...
(Repost) CwpApi : GetRelativePath() returns invalid paths (security advisory)
ACD Incorporated Security Advisory Project: Comprehensive Web Programming API Synopsis: GetRelativePath in CwpApi.php returns paths outside of the HTTP ServerRoot. Advisory date: January 18, 2002 New version: 1.1.1 1. In Brief: An updated CwpApi release is available which fixes a minor security b...
ZyXEL Router Default Telnet Password Present
The remote host is a ZyXEL router with a default password. An attacker could telnet to it and reconfigure it to lock the owner out and prevent him from using his Internet connection, or create a dial-in user to connect directly to the LAN attached to it. This script was written by Giovanni Fiasch...
TransSoft Broker FTP Server 3.0/4.0/4.7/5.x - CWD Buffer Overflow
source: https://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence can, if repeatedly issued, create a buffer overflow causing the...
[Security] ntop remote file exploitability
Attachment: pgpM9u4MveNNe.pgp Description: PGP message...
[Security] ntop remote file exploitability
Attachment: pgpRSumQXPlwf.pgp Description: PGP message...
[Security] ntop remote file exploitability
re.Match object; span=1718, 2705, match=!--X-Head-of-Message--\nul\nliemTo/em:...