CVE-2007-5230: Undefined Security Weakness

admin/uploadfiles.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231...

CVE-2007-0956: Missing Authentication for Critical Function

The telnet daemon telnetd in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882...

[SA21421] ColdFusion AdminAPI Authentication Bypass

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[SA20982] BT Voyager 2091 Wireless Exposure of Configuration Information

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

[SA17625] Uresk Links Missing Administration Authentication

TITLE: Uresk Links Missing Administration Authentication SECUNIA ADVISORY ID: SA17625 VERIFY ADVISORY: http://secunia.com/advisories/17625/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Uresk Links 2.x http://secunia.com/product/6150/ DESCRIPTION: syst3mf4ult...

CVE-2005-2403: Undefined Security Weakness

The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username...

CVE-2002-1810: Missing Authentication for Critical Function

D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information...