4145 matches found
Mereo Web Server 1.8 - Source Code Disclosure
Mereo Web Server 1.8 - Source Code Disclosure Mereo Web Server v1.8 Multiple Remote Source Code Disclosure Found By: DrIDE Tested On: Windows XPSP3 - Description - Mereo Web Server v1.8 is a Windows based HTTP server. This is the latest version of the application available. Mereo is vulnerable to...
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
+----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
Regental Medien Blind SQL Injection
o Regental Medien Blind SQL Injection Vulnerability Software : Regental Medien Vendor : http://www.regental-medien.de/ Author : NoGe Home : http://antisecurity.org o Vulnerable file index.php o Exploit http://localhost/path/index.php?mainid=SQL o Proof of Concept...
SuSE9 Security Update : Tomcat (YOU Patch Number 12271)
This update of tomcat fixes an information leak due to incorrect IP address filtering. CVE-2008-3271 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41249;...
Design/Logic Flaw
lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...
CVE-2009-3287
lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...
Foreigners: how to get the remote computer's IP address-vulnerability warning-the black bar safety net
Most might think the first time how to find your friend's computer's IP address or find people with you in Yahoo Messenger or chat IP address. In this I will show you how to find remote computer's IP address in one simple step. I created a PHP script that allows you to more easily find you choose...
Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities
Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...
Huawei SmartAX MT880 Multiple XSRF Vulnerabilities
Exploit for hardware platform in category remote exploits ================================================== Huawei SmartAX MT880 Multiple XSRF Vulnerabilities ================================================== Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI...
华为SmartAX MT880跨站请求伪造漏洞
SmartAX MT880是一款小型的ADSL调制解调器。 SmartAX MT880基于Web的管理界面允许用户通过提交HTTP请求执行某些操作。由于没有对请求执行重复的验证检查，如果已登录的管理用户访问了恶意网页，就可能导致添加管理用户或更改某些配置。 0 Huawei SmartAX MT880 厂商补丁： Huawei ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.huawei.com/...
Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100]
Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...
Absolute Software Computrace LoJack for Laptops安全绕过漏洞
Bugraq ID: 35889 Absolute Software Computrace LoJack for Laptop是一款笔记本防盗解决方案，笔记本被偷后可向监听中心提供笔记本的IP地址或者电话号码。 程序存在安全绕过问题，攻击者可以方便的修改配置，控制应用程序的通信到恶意IP或URL，导致未授权的负载直接定向到笔记本电脑上。 目前没有详细的漏洞细节提供。 Absolute Software Computrace LoJack for Laptops 目前没有详细解决方案提供： http://www.absolute.com/...
“Broiler”get the insider Secret's to exploit system vulnerabilities-vulnerability warning-the black bar safety net
It has been, by a large number of“broiler”is composed of the zombiesweb, all the time not a threat to all web users safe.“ Chicken”, refers to those who are the attacker full control of a computer network, it is the composition of the botnet of the main factors. Therefore, in order to eliminate t...
Exclusive tells the story: use the Lcx to the internal network port forwarding-bug warning-the black bar safety net
Through this case study you can learn to: 1learn about port forwarding the relevant knowledge 2Using the toolsoftwarelcx to perform port forwarding Lcx. exe is a port forwarding tool, equivalent to the broiler on A 3 3 8 9 port forwarding to an external network IP address of B machine, so the...
Tandberg MXP F7.0 - 'USER' Remote Buffer Overflow (PoC)
TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We crash the process FtpCt00 by sending a 251 char string of /x20 commonly known as a blank space.very simple + The BOF happens due to the system passing all usernames:passwords to a log file. + Vendor has fixe...
Command injection
The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...
CVE-2009-2426
The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...
CVE-2009-2426
The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...
CVE-2009-2426
The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...
