3283 matches found
CVE-2004-2078
Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service reboot and loss of logged events via a long request to TCP port 80, possibly triggering a buffer overflow...
Red-M Red-Alert 3.1 - Remote Denial of Service
Red-M Red-Alert 3.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/9618/info Problems in various abilities have been identified in the Red-M Red-Alert network monitors. Because of this issues, an attacker may be able to crash a vulnerable device and eliminate logs, gain...
Super-M Son hServer URI Traversal Arbitrary File Access
Super-M Son hServer is vulnerable to a directory traversal. It enables a remote attacker to view any file on the computer with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11678; scriptversion"1.22";...
Multiple Vulnerabilities In P-Synch Password Management
Multiple Vulnerabilities In P-Synch Password Management ------------------------------------------------------- The other night I came across a server running P-Synch. I had never heard of it so i was curious to poke around on it a bit. Within an hour i found the vulns listed below. Im pretty sur...
M-TECH P-Synch 6.2.5 - 'nph-psf.exe?css' Remote File Inclusion
source: https://www.securityfocus.com/bid/7747/info A remote file include vulnerability has been reported for P-Synch. Due to insufficient sanitization of some user-supplied URI variables, it is possible for a remote attacker to include a malicious file in a URL. An attacker may exploit this by...
CVE-2002-0394
The CVE-2002-0394 entry refers to Red-M 1050 Access Point vulnerabilities. Affected device: Red-M 1050AP; issue: case-insensitive administrative passwords with max length 16 and allowed chars [a–z0–9], enabling quicker brute-force attempts. Related issues documented include Management Web Server ...
CVE-2002-0394
Red-M 1050 Bluetooth Access Point uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords...
CVE-2002-0395
The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...
CVE-2002-0393
Buffer overflow in Red-M 1050 Bluetooth Access Point management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password...
CVE-2002-0396
The web management server for Red-M 1050 Bluetooth Access Point does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session...
CVE-2002-0398
Red-M 1050 Bluetooth Access Point PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name...
CVE-2001-0731
CVE-2001-0731 affects Apache 1.3.20 when Multiviews is enabled. A remote attacker can cause a directory listing to be displayed (information disclosure) by crafting a request containing an M=D query string, bypassing normal index page behavior. Public advisories and scans consistently reference t...
@stake advisory: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities Issues: Red-M 1050 Access Point Management Web Server DoS Red-M 1050 Access Point Case Insensitive Passwords Red-M 1050 Access...
Multiple RED-M 1050 bugs
No description provided...
CVE-2002-0393
Affected product: Red-M 1050 Bluetooth Access Point (management web interface). Vulnerable component: the management web server where a buffer overflow can be triggered by a long administration password, leading to remote DoS and potentially arbitrary code execution. Exploitation details are not ...
CVE-2002-0393
Buffer overflow in Red-M 1050 Bluetooth Access Point management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password...
Multiple bugs in Red-M 1050 Blue Tooth
No description provided...
[NEWS] Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
PHPNuke 5 Cross Scripting
This is a forward of frog-m@n posting to Vuln-Dev. Here a few holes that i've found in PHPNuke. 5 "Cross Site Scripting". http://phpnuke.org/modules.php? name=Downloads&dop=viewdownloaddetails&lid=0 2&ttitle=JAVASCRIPT http://phpnuke.org/modules.php? name=Downloads&dop=ratedownload&lid=118&ttitle...