ABB MicroSCADA Wserver Multiple Buffer Overflows

Multiple Buffer Overflow vulnerabilities have been reported in the Wserver component of ABB MicroSCADA. The vulnerabilities are due to the copying of user controlled data to stack-based buffers without size verification. A remote attacker can exploit this issue by sending a specially crafted...

OpenX Ad Server Backdoor PHP Code Execution (CVE-2013-4211)

A Code Execution vulnerability has been reported in OpenX Ad Server. The vulnerability is due to the existence of a backdoor within the flowplayer-3.1.1.min.js library. A remote attacker could exploit this vulnerability by sending a malicious request to the server. Successful exploitation could...

XAMPP 1.8.1 Local Write Access Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2013-007 - Original release date: March 14th, 2013 - Last revised: March 19th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 6,8/10 CVSS Base Score - CVE-ID: CVE-2013-2586...

PHP Charts 1.0 Remote Code Execution

This exploit leverages an eval bug in the PHP Charts library allowing for remote code execution. A reverse shell is delivered using Perl. !/usr/bin/python Original Advisory came from: http://packetstormsecurity.com/files/119582/PHP-Charts-1.0-Code-Execution.html infodox - insecurety.net import...

HP System Management Home Page Command Injection (CVE-2013-3576)

A Remote PHP Code Injection has been reported in HP System Management. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious request containing a specially crafted parameter to the target server. Successful exploitation would result...

EMC AlphaStor Device Manager Command Injection - Improved performance (CVE-2013-0928)

A remote command execution vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious request containing a specially crafted parameter to the target server. Successful...

Digium Asterisk HTTP Management Interface Stack Overflow (CVE-2012-5976; CVE-2013-2686)

A stack overflow vulnerability has been reported in Digium Asterisk. The vulnerability is due to an unchecked memory allocation on the stack, which can result in a stack overflow or writing of attacker-controlled data to arbitrary memory locations. A remote attacker can use this vulnerability by...

HP Data Protector OmniInet Service NULL Dereference Denial of Service

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of various components and processes: Cell Manager, OmniInet, backup agents, and backup device servers. The OmniInet process omniinet.exe is...

Citrix Secure Gateway Unspecified DoS

The version of Citrix Secure Gateway running on the remote host has an unspecified denial of service vulnerability. Making a specially crafted request can result in 100% CPU utilization, causing the application to become unresponsive. A remote attacker could exploit this by sending a malicious...

VMware vCenter Update Manager XSS

The version of VMware vCenter Update Manager running on the remote host has a cross-site scripting vulnerability. This is due to a bug in Jetty, the underlying web server. When Jetty displays a directory listing, arbitrary text can be inserted into the page. A remote attacker could exploit this b...

Update Protection against HP OpenView Network Node Manager Denial of Service

A denial of service vulnerability exists in HP OpenView Network Node Manager. The flaw is due to a design weakness when processing crafted packets sent to the server. Remote attackers could exploit this vulnerability by sending a malicious request to the affected TCP port. Successful exploitation...

e107多个跨站脚本和SQL注入漏洞

BUGTRAQ ID: 37087 e107是用php编写的内容管理系统。 e107的以下模块没有充分的过滤用户所提交的变量： - submitnews.php - usersettings.php. - e107admin/newpost.php. - e107admin/banlist.php. - e107admin/banner.php. - e107admin/cpage.php - e107admin/download.php. - e107admin/usersextended.php. - e107admin/frontpage.php. -...

VMware ISAPI扩展远程拒绝服务漏洞

BUGTRAQ ID:30935 CVE ID：CVE-2008-3697 CNCVE ID：CNCVE-20083697 ISAPI是IIS功能扩展，Vmware在服务器产品中使用ISAPI扩展。 VMware使用的其中之一ISAPI处理恶意请求存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 发送畸形的请求，IIS可关闭，IIS 6.0可以自动重新启动，但是IIS 5.0在当启动类型设置为手动时不能自动启动。 VMWare Server 1.0.7 build 108231 VMWare Server 1.0.7 目前供应商已经提供升级程序，可联系供应商获得补丁信息：...

phpMyAdmin远程跨站脚本漏洞

CVECAN ID: CVE-2008-2960 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 如果PHP registerglobals的设置为on且服务器没有应用/libraries中.htaccess文件的设置的话，远程攻击者就可以通过向phpMyAdmin提交恶意请求执行跨站脚本攻击，导致执行任意代码。 phpMyAdmin 2.11.7 厂商补丁： phpMyAdmin ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Symantec Altiris Deployment Solution目录遍历漏洞

BUGTRAQ ID: 26266 CVECAN ID: CVE-2007-3874 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec的Altiris Deployment Solution产品的可选PXE服务器组件中包含有tftp/mtftp服务程序，该服务程序中存在目录遍历漏洞。 如果用户提交了恶意请求的话，就可能允许未经认证的攻击者以SYSTEM权限下载系统上的任意文件。 Symantec Altiris Deployment Solution 6.x SP2...

FileCOPA FTP Server <= 1.01 (LIST) Remote Buffer Overflow Exploit (2)

No description provided by source. ============================================================================================= FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit2 By Umesh Wanve...

AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print "Uso: atftp-19.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='udp',...

2WIRE Modems/Routers - 'CRLF' Denial of Service

//Vulnerable: //2Wire OfficePortal 0 //2Wire HomePortal 1500W //2Wire HomePortal 100W //2Wire HomePortal 100S //2Wire HomePortal 1000W //2Wire HomePortal 1000SW //2Wire HomePortal 1000S //2Wire HomePortal 1000 //2Wire HomePortal 0 ////////////////////////////////// STARTING CODE...

Check for RealServer DoS

It is possible to crash a RealServer version 7 by sending a malformed http request. OpenVAS Vulnerability Test $Id: realservermalformedrequestdos.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: Check for RealServer DoS Authors: John Lampe [email protected] Copyright: Copyright C 2000 John...

Leif M. Wright Web Blog 1.1 - File Disclosure

source: https://www.securityfocus.com/bid/9517/info Web Blog is prone to a file disclosure vulnerability. Remote attackers may gain access to files on the system hosting the server that reside outside of the server root by submitting a malicious request that contains directory traversal sequences...