Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Vulnerability

Exploit for windows platform in category remote exploits =================================================================== Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Vulnerability ===================================================================...

Internet Information Server and IAS ActiveX unauthorized access and DoS

ActiveX allows privileged actions to be silently executed...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

Cisco Unified Communications Manager multiple security vulnerabilities

Computer Telephony Integration Manager DoS TCP/2748 The Real-Time Information Server SOAP interface TCP/2556 unauthorized access...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities Advisory ID: cisco-sa-20080625-cucm Revision 1.0 For Public Release 2008 June 25 1600 UTC GMT...

Novus 1.0 (notas.asp nota_id) Remote SQL Injection Vulnerability

No description provided by source. Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2-...

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2- anota.fepublicacion 3- anota.seccionid 4-...

CVE-2006-5278

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

Microsoft Internet Information Server 5.1 DLL请求拒绝服务漏洞

Microsoft Internet Information Server是一款流行的WEB服务程序。 Windows XP Professional Service Pack 2下的IIS 5.1处理畸形匿名HTTP请求存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 此问题只存在于文件夹中对脚本和可执行文件设置了执行权限的情况。提交包含"0", "1", "2", "3", "4", "5", "6", "7", "8", 或"9" 等字符的请求，可导致应用程序停止响应。 Microsoft Windows XP Tablet PC Edition SP2 Microso...

Cisco Unified Communications Manager / Presence Server multiple security vulnerabilities

Unauthorized SNMP access, buffer overflow in Certificate Trust List TCP/2444 and Real-Time Information Server Data Collector TCP/2556...

Microsoft Internet Information Server DoS

Request like http://www.example.com/vtibin/.dll/0 for virtual folders with CGI execution enabled causes server to crash and potentially leads to code execution...

Microsoft Commerce Server 2002: Logon as known user with a false password

Microsoft Commerce Server 2002: Logon as known user with a false password Vulnerable: Microsoft Windows Server 2000/2003 + Internet Information Server 5/6 + Commerce Server 2002 Discussion: Microsoft Commerce Server is used by company's who want to give customers the opportunity to change there o...

Cumulative Patch for Internet Information Services (Q327696)

Cumulative Patch for Microsoft IIS Q327696 Impact of vulnerability: Ten new vulnerabilities, the most serious of which could enable code of an attacker's choice to be run on a server. Recommendation: Users using any of the affected products should install the patch immediately. Maximum Severity...

CVE-2002-1717

Microsoft Internet Information Server IIS 5.1 allows remote attackers to view path information via a GET request to 1 /vtipvt/access.cnf, 2 /vtipvt/botinfs.cnf, 3 /vtipvt/bots.cnf, or 4 /vtipvt/linkinfo.cnf...

CVE-2002-1718: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Information Server IIS 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension FPSE file, as claimed using an HTTP request for colegal.htm that contains .. dot dot sequences...

CVE-2002-1717: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Information Server IIS 5.1 allows remote attackers to view path information via a GET request to 1 /vtipvt/access.cnf, 2 /vtipvt/botinfs.cnf, 3 /vtipvt/bots.cnf, or 4 /vtipvt/linkinfo.cnf...

CVE-2002-1694: Undefined Security Weakness

Microsoft Internet Information Server IIS 4.0 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running...

CVE-2002-1180

A typographical error in the script source access permissions for Internet Information Server IIS 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."...