BolinTech DreamFTP Server 1.0.2 - 'PORT' Remote Denial of Service

/ ============================================================= DREAM FTP Server 1.0.2 PORT Denial of Service Exploit ============================================================= Discovered by: InTeL Tested on DREAM FTP v1.02 on Windows XP SP2 Dream FTP v1.02 also has anonymous logins enabled by...

CVE-2006-6583

ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to 1 the Logins box and 2 the Search box...

CVE-2006-6583

ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to 1 the Logins box and 2 the Search box...

War-FTPD 1.65 Password Overflow

This exploits the buffer overflow found in the PASS command in War-FTPD 1.65. This particular module will only work reliably against Windows 2000 targets. The server must be configured to allow anonymous logins for this exploit to succeed. A failed attempt will bring down the service completely...

CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) SQL Injection

No description provided by source. CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection Vulnerability Risk : High Credit : ASIANEAGLE Contact: [email protected] Web : www.asianeagle.org Download Link : http://www.aspindir.com/Kategoriler/asp/portal-&-hazir-site/?P=7&K=&T= Exploit: Note :...

EUVD-2006-4884

CMtextS 1.0 and earlier stores userslogins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password...

CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln

No description provided by source. ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...

[Full-disclosure] [vuln.sg] Cool Messenger Server SQL Injection Vulnerability

vuln.sg Vulnerability Research Advisory Cool Messenger Server SQL Injection Vulnerability by Tan Chew Keong Release Date: 2006-08-23 Summary ------- A vulnerability has been found in Cool Messenger Office/School Server. When exploited, the vulnerability allows any people to logon to the messenger...

CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection

CLUB-Nuke XP 2.0 LCID 2048 Turkish Version - SQL Injection CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection Vulnerability Risk : High Credit : ASIANEAGLE Contact: [email protected] Web : www.asianeagle.org Download Link :...

PrideForum 1.0 - 'forum.asp' SQL Injection

Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...

Let all the forward program to achieve the reverse connection-vulnerability warning-the black bar safety net

As a backdoor program, you first need to covert strong, and secondly to have the practical functions of the head can not be too large, the self-protection function also to be strong, the last program run to be stable, otherwise halfway error-prone trouble; there is a need to support multiple user...

Business Objects WebIntelligence 6.5x Account Lockout and System DoS

Computer Sciences Corporation Security Advisory December 14, 2005 Summary: CSC have discovered an issue that could impact upon the availability and security of servers operating Business Objects WebIntelligence software. If a remote malicious attacker is able to access authentication mechanisms...

IMAP Unencrypted Cleartext Logins

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. OpenVAS...

POP2 Unencrypted Cleartext Logins

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover login names and passwords by sniffing traffic to the POP2 daemon. OpenVAS Vulnerability Test $Id: pop2unencryptedcleartextlogins.nasl 6056 2017-05-02 09:02:50Z teissa $...

security flaw

sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to...

CVE-2004-2470

Technical details about CVE-2004-2470 are not publicly available in the provided documents; no specifics on affected product versions, impact, or vectors are given. Monitor for updates.

CVE-2004-2470

Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins...

CVE-2005-2243

Memory leak in inetinfo.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1, when Multi Level Admin MLA is enabled, allows remote attackers to cause a denial of service memory consumption via a large number of Admin Service Tool AST logi...

CVE-2005-0505

Unknown vulnerability in Information Resource Manager IRM before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins...