60 matches found
DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation
Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896 https://vuldb.com/sv/?id.97954...
You believe that there is no vulnerability in the code? Americans are Research-vulnerability warning-the black bar safety net
Internet of everything era, in addition to People's lives provides a convenient, also brought many security risks, more and more devices more vulnerable to hacking attacks. There is no possibility of the birth of a cannot is the invasion code? DARPA-the US Defense Advanced Research Projects Agenc...
Mountain Network Systems WebCart 8.4 Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3453/info Mountain Network Systems WebCart is a cgi based online shopping suite. An error in the webcart.cgi script allows a remote user to pass an arbitrary shell command which will be executed by the script. WebCart...
CVE-2013-6035
CVE-2013-6035 affects satellite terminals from Harris (BGAN RF-7800B-VU204, RF-7800B-DU204), Hughes (9201, 9450, 9502), Thuraya IP, Inmarsat, and Japan Radio JUE-250/JUE-500. The issue: firmware allows unauthenticated sessions on TCP port 1827 through an insecure proprietary protocol, enabling an...
CVE-2013-6034: Undefined Security Weakness
The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login acce...
CVE-2013-6035: Improper Authentication
The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to...
Hughes Network Systems Broadband Global Area Network (BGAN) satellite terminal firmware contains multiple vulnerabilities
Overview Firmware developed by Hughes Network Systems used in a number of BGAN satellite terminals contains undocumented hardcoded login credentials CWE-798. Additionally, the firmware contains an insecure proprietary communications protocol, likely a debugging service, that allows unauthenticate...
The network system SQL injection vulnerability storm management password-vulnerability warning-the black bar safety net
Construction and network systemsSQL injectionvulnerabilities in the storm management password Search keyword: inurl:news-content. asp? articleid Using the statement:%20union%20select%201,2,3,4,5,6,7,username,password,1 0,1 1,1 2,1 3,1 4,1 5,1 6,1 7,1 8,1 9,2 0,2 1,2 2,2 3,2 4,2 5,2 6%20from%20adm...
MS Windows Plug-and-Play (Umpnpmgr.dll) DoS Exploit (MS05-047) (2)
Exploit for unknown platform in category dos / poc ================================================================== MS Windows Plug-and-Play Umpnpmgr.dll DoS Exploit MS05-047 2 ================================================================== // tested and approved /str0ke / Program: Denial of...
CVE-2001-1502
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter...
CVE-2001-1502
The OpenVAS entries confirm CVE-2001-1502 affects Mountain Network Systems WebCart 8.4, where the webcart.cgi CGI script does not properly filter user input and allows remote command execution via shell metacharacters in the NEXTPAGE parameter. Impact is arbitrary command execution on the affecte...
CVE-2001-1502: Undefined Security Weakness
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter...
Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities
...
CVE-2001-1502
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter...
Webcart v.8.4
Webcart v.8.4 by Mountain Network Systems, Inc., This script has vulnerability does not filter input of the user which allows to carry out commands from WebServer. EXPLOIT: http://www.server.com/cgi-bin/webcart/webcart.cgi? CONFIG=mountain&CHANGE=YES&NEXTPAGE=;ls|&CODE=PHOLD...
Mountain Network Systems WebCart 8.4 - Command Execution
source: https://www.securityfocus.com/bid/3453/info Mountain Network Systems WebCart is a cgi based online shopping suite. An error in the webcart.cgi script allows a remote user to pass an arbitrary shell command which will be executed by the script. WebCart exploit Spawn bash style Shell with...
NetBSD Security Advisory 2000-002
NetBSD Security Advisory 2000-002 ================================= Topic: IP options processing Denial of Service Version: NetBSD 1.4.2 and prior; NetBSD-current until 20000507. Severity: Network-connected systems can be crashed remotely. Abstract ======== Receipt of IP packets with certain...
webcart.cc.txt
Date: Fri, 23 Apr 1999 23:14:31 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data This is my first post to Bugtraq so please bear with me for any errs and/or misconducts. I'd just like to point out, that Webcart is vulnerable too. Here goes: Mountain...