1759 matches found
CVE-2008-0403
The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi...
CVE-2008-0228
Cross-site request forgery CSRF vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators...
CVE-2008-0228
The CVE-2008-0228 entry describes a CSRF vulnerability in the Linksys WRT54GL Wireless-G Broadband Router. The flaw resides in the router’s web interface (apply.cgi) and is triggered by unauthenticated, remote requests that enable an attacker to perform actions as administrators. The affected sof...
CVE-2007-6464
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the grootdir parameter to 1 adminpageopen.php and 2 clientpageopen.php in global/templates/...
SquirrelMail G/PGP Plugin deletekey() Command Injection Exploit
No description provided by source. !/usr/local/bin/ruby puts"http://backdoored.net\n" puts "SquirrelMail G/PG deletekey command injection exploit\n" puts "http://backdoored.net Visit Us\n" puts "Coded by Backdoored member. \n" puts "--------------------------------------------------\n" if ARGV0 =...
SquirrelMail G/PGP Plugin deletekey() Command Injection Exploit
Exploit for unknown platform in category web applications =============================================================== SquirrelMail G/PGP Plugin deletekey Command Injection Exploit =============================================================== !/usr/local/bin/ruby puts"http://backdoored.net\n...
SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Access Validation / Input Validation
source: https://www.securityfocus.com/bid/26788/info The G/PGP encryption plugin for SquirrelMail is prone to an input-validation vulnerability and an access-validation vulnerability. Attackers can exploit these issues to inject arbitrary script code into public key data or to delete and overwrit...
Design/Logic Flaw
The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service degraded networking and logging via a flood of TCP SYN packets, a related issue to CVE-1999-0116...
CVE-2007-6040
The CVE-2007-6040 entry concerns the Belkin F5D7230-4 Wireless G Router: a remote denial-of-service via a flood of TCP SYN packets, degrading networking and logging. The provided materials do not specify affected firmware versions, exact root cause details, exploit codes, or mitigations. Connecte...
Belkin Wireless G Router DoS
ATI security Group has discovered a Denial of Service Vulnerability in the Belkin Wireless G Router's. Vulnerability: Denial of Service SYN FLOOD Simple Dork: http://RouterIp DoS SYN FLOOD on ROUTER Vulnerable Product; Belkin Wireless G Router Router Model F5D7230-4 Tested on; Belkin Wireless G...
Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability
Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability Download: http://www.xcomputer.cz/ Bug found by JosS / Jose Luis Gngora Fernndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "power by xcomputer.cz" Sto...
Buffer overflow
Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...
CVE-2007-5436
Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...
CVE-2007-5436
The CVE-2007-5436 entry concerns G DATA Antivirus 2007. A buffer overflow in the ActiveX control ScanObjectBrowser.DLL, specifically in the SelectPath function, could allow remote code execution via unspecified parameters. The issue is described as not crossing privilege boundaries in many enviro...
CVE-2007-5436
Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...
G Data antivirus buffer overflow
ScanObjectBrowser.DLL SelectPath function buffer overflow...
[ELEYTT] 10PAZDZIERNIK2007
Eleytt Research www.eleytt.com Overview: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Tomasz Polis, www.eleytt.com Credit: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Vulnerability Table =================== 1. CA Erwin Datatype Standards File...
CVE-2007-5041
G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey and 2 NtOpenProcess kernel SSDT hooks...
Design/Logic Flaw
G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey and 2 NtOpenProcess kernel SSDT hooks...
CVE-2007-5041
G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey and 2 NtOpenProcess kernel SSDT hooks...