5462 matches found
Cisco Aironet AP1x00 Malformed HTTP GET Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8290/info Cisco Aironet AP1x00 series devices are prone to a denial of service vulnerability upon receipt of a malformed HTTP GET request. Such a request will cause the device to reload. !/usr/bin/perl Cisco Global...
Applied Watch Command Center 1.0 Authentication Bypass Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these...
Heartbleed OpenSSL - Information Leak Exploit (1)
No description provided by source. / CVE-2014-0160 heartbleed OpenSSL information leak exploit ========================================================= This exploit uses OpenSSL to create an encrypted connection and trigger the heartbleed leak. The leaked information is returned within encrypted...
Network Security Wizards Dragon-Fire IDS 1.0 Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/564/info The Dragon-Fire IDS remote web interface under version 1.0 has an insecure CGI script which allows for users to remotely execute commands as the user nobody. This could lead to a remote compromise of the system...
Lyris ListManager MSDE Weak sa Password
No description provided by source. $Id: lyrislistmanagerweakpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Snort unified 1 IDS Logging Alert Evasion, Logfile Corruption/Alert Falsify
No description provided by source. Advisory: ========= Snort unified 1 IDS Logging Alert Evasion, Logfile Corruption/Alert Falsify Log: ==== 30/06/2009 Bug detected. 20/07/2009 First mail with snort team. 20/07/2009 Snort team answer they will fix it in the next release 2.8.5. 16/09/2009 Snort...
Apple QuickTime 7.2/7.3 - RSTP Response Universal Exploit (win/osx)
No description provided by source. Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows...
Cisco IOS 12.x HTTP Server Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/33260/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script co...
Linux/x86 Polymorphic ShellCode - setuid(0)+setgid(0)+add user 'iph' without password to /etc/passwd
No description provided by source. / Exploit Title: Linux/x86 Polymorphic ShellCode - setuid0+setgid0+add user 'iph' without password to /etc/passwd setuid - setgid - open - write - close - exit Date: 30/12/2011 Author: pentesters.ir Tested on: Linux x86 - CentOS 6.0 - 2.6.32-71 Website:...
Axent NetProwler 3.0 Malformed IP Packets DoS Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1225/info Axent NetProwler 3.0 IDS is vulnerable to a malformed packet attack. It will crash if the Man-in-the-Middle signature encounters a packet for which the following expression is true: IPHEADERLENGTH +...
IBM WebSphere MQ File Transfer Edition Web Gateway CSRF Vulnerability
No description provided by source. Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited using a CSRF Cross Site Request Forgery...
Applied Watch Command Center 1.0 Authentication Bypass Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these...
RunCMS 1.6 - Remote Blind SQL Injection Exploit (IDS evasion)
No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT:...
Appfluent Database IDS < 2.1.0.103 (Env Variable) Local Exploit
No description provided by source...
Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection Vulnerability Note: Requires at least one blog entry to be made prior to injection Usage: php script.php host path user id Usage Example: php script.php domain.com /simplog/ 1 Googledork: intext:Powered b...
Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit (x86)
No description provided by source. !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of Kansas City POP Daemon Version 0.0 - Copyright c 1999 David Nicol [email protected] kevin-finisterres-mac-mini:...
Cisco IDS Device Manager 3.1.1 Arbitrary File Read Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4760/info IDS Device Manager is a web interface to the Cisco IDS systems. It is distributed and maintained by Cisco Systems. The IDS Device Manager may allow a remote user to gain access to sensitive information on the...
LogWatch 2.1.1/2.5 Insecure Temporary Directory Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4374/info LogWatch is a freely available, open source script for monitoring log files. It may be used with the Linux and Unix Operating systems. Upon execution, LogWatch creates a directory in /tmp. This directory uses th...
CVE-2014-3292
The Real Time Monitoring Tool RTMT implementation in Cisco Unified Communications Manager Unified CM allows remote authenticated users to 1 read or 2 delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199...
