Lucene search
K

419 matches found

exploitpack
exploitpack
added 2004/08/23 12:0 a.m.25 views

Axis Network Camera 2.x And Video Server 1-3 - HTTP Authentication Bypass

Axis Network Camera 2.x And Video Server 1-3 - HTTP Authentication Bypass source: https://www.securityfocus.com/bid/11011/info A hardcoded backdoor administrative-user issue allows remote attackers to administer affected devices. This likely cannot be disabled. This issue is reported to affect: -...

1AI score
Exploits0
Cvelist
Cvelist
added 2004/07/23 4:0 a.m.28 views

CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

7.6AI score0.59614EPSS
Exploits1References14
Debian CVE
Debian CVE
added 2004/07/23 4:0 a.m.23 views

CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

10CVSS7.5AI score0.59614EPSS
Exploits1
securityvulns
securityvulns
added 2004/07/23 12:0 a.m.61 views

Denial of Service in Conceptronic CADSLR1 Router

. : Shell Security Advisory : . Denial of Service in Conceptronic CADSLR1 Router ----------------------------------------------------------------------------- - 1 - Introduccin - Intro ------------------------------------------- El modelo CADSLR1 de Conceptronic es un router para ADSL con un puer...

0.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/07/22 12:0 a.m.34 views

RHEL 3 : samba (RHSA-2004:259)

Updated samba packages that fix buffer overflows, as well as other various bugs, are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Evgeny Demidov discovered a flaw in the internal routine used by the Samba Web Administration Tool SWAT in Samba versions 3.0.2...

10CVSS9AI score0.59614EPSS
Exploits1References5
Exploit DB
Exploit DB
added 2004/03/28 12:0 a.m.49 views

Cisco - Cisco Global er Tool

!/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main $host = ""; $expvuln = ""; $host = @ARGV 1 ...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2003/05/28 12:0 a.m.53 views

CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass

Core Security Technologies Advisory http://www.coresecurity.com Axis Network Camera HTTP Authentication Bypass Date Published: 2003-05-27 Last Update: 2003-05-23 Advisory ID: CORE-2003-0403 Bugtraq ID: 7652 CVE Name: CAN-2003-0240 Title: Axis Network Camera HTTP Authentication Bypass Class: Acces...

10CVSS0.4AI score0.09434EPSS
Exploits1
Core Security
Core Security
added 2003/05/27 12:0 a.m.36 views

Axis Network Camera HTTP Authentication Bypass

Advisory ID Internal CORE-2003-0403 Core Security Technologies Advisory http://www.coresecurity.com Date Published: 2003-05-27 Last Update: 2003-05-23 Advisory ID: CORE-2003-0403 Bugtraq ID: 7652 CVE Name: CAN-2003-0240 Title: Axis Network Camera HTTP Authentication Bypass Class: Access Validatio...

10CVSS7.4AI score0.09434EPSS
Exploits1
exploitpack
exploitpack
added 2003/05/27 12:0 a.m.14 views

Axis Network Camera 2.x - HTTP Authentication Bypass

Axis Network Camera 2.x - HTTP Authentication Bypass source: https://www.securityfocus.com/bid/7652/info A vulnerability has been discovered in various Axis Communications products. By making a request for a specially formatted URL, it may be possible for remote users to access the administrative...

0.9AI score
Exploits0
Exploit DB
Exploit DB
added 2003/05/27 12:0 a.m.63 views

Axis Network Camera 2.x - HTTP Authentication Bypass

source: https://www.securityfocus.com/bid/7652/info A vulnerability has been discovered in various Axis Communications products. By making a request for a specially formatted URL, it may be possible for remote users to access the administrative configuration interface without being prompted for...

7.4AI score
Exploits0
CVE
CVE
added 2003/04/02 5:0 a.m.38 views

CVE-2002-0412

NTOP is affected by CVE-2002-0412 due to a format string vulnerability in the TraceEvent function prior to version 2.1. The issue allows remote attackers to execute arbitrary code by injecting format strings into syslog calls. Attack vectors include an HTTP GET request, or credentials supplied in...

7.5CVSS8.2AI score0.09035EPSS
Exploits0References10Affected Software1
CERT
CERT
added 2003/01/13 12:0 a.m.30 views

Lotus Domino web server vulnerable to buffer overflow via long HTTP authentication header containing non-ASCII characters

Overview A remotely exploitable buffer overflow exists in versions of IBM's Lotus Domino web server prior to R5.0.10. Description A remotely exploitable buffer overflow exists in the Lotus Domino web server. The overflow can occur as the result of an overly long HTTP Authenticate header containin...

8AI score
Exploits0References2
d2
d2
added 2002/12/31 5:0 a.m.50 views

DSquare Exploit Pack: D2SEC_DOMINOR5

Name| d2secdominor5 ---|--- CVE| CAN-2002-1624 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino HTTP Authentication Logging Stack Overflow Notes|...

5CVSS1.8AI score0.05326EPSS
Exploits1
NVD
NVD
added 2002/07/23 4:0 a.m.10 views

CVE-2002-0670

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing...

7.5CVSS6.8AI score0.01257EPSS
Exploits0References3
Cvelist
Cvelist
added 2002/07/15 4:0 a.m.13 views

CVE-2002-0670

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing...

6.8AI score0.01257EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2001/05/26 12:0 a.m.24 views

Check Point FireWall-1 HTTP Client Authentication Detection

The Check Point FireWall-1 Client Authentication web server is used to authenticate a user via HTTP. Once authenticated, the user can get more privileges on the network ie: get access to hosts which were previously blocked by the firewall. C Tenable Network Security, Inc. include"compat.inc";...

5.5AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2000/12/19 12:0 a.m.37 views

Cold Fusion Administration Page Overflow DoS

A denial of service vulnerability exists within the Allaire ColdFusion web application server version 4.5.1 and earlier which allows an attacker to overwhelm the web server and deny legitimate web page requests. By downloading and altering the login HTML form, an attacker can send overly large...

5CVSS5.5AI score0.09008EPSS
Exploits0References2
securityvulns
securityvulns
added 2000/06/27 12:0 a.m.41 views

Andrew Lewis

The Problem: ------------ Many admins who use Proxy+ configure the remote administration port which works over HTTP to only accept connections from the localhost. Fortunately enough, the admin port doesn't allow connections which have been bounced through the HTTP proxy. The telnet proxy, on the...

7.5AI score
Exploits0
Cvelist
Cvelist
added 2000/01/18 5:0 a.m.13 views

CVE-1999-0853

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure...

7.2AI score0.00926EPSS
Exploits0References1
Rows per page
Query Builder