CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1594

OCS Inventory NG 1.02.1 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in ocsreports/index.php, allowing remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. The issue is documented across CVE-201...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595

CVE-2010-1595 affects OCS Inventory NG 1.02.1, specifically the ocsreports/index.php component, where multiple SQL injection vulnerabilities exist via the c, val_1, and onglet_bis parameters. The issue allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, int...

CVE-2010-1594: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

The use of PMK Hashes for the WPA/WPA2 high-speed hack-vulnerability warning-the black bar safety net

Author: Christopher Yang This article relates to the Hash key based on the Cowpatty under the genpmk tool to make, this is the ZerOnesecurityteam is the wireless security group by with Aircrack-ng airolib-ng and related tools of convenience, versatility and repeated the comparison after the final...

Aircrack-NG Tools svn r1675 Remote Exploit

Exploit for multiple platform in category dos / poc ========================================== Aircrack-NG Tools svn r1675 Remote Exploit ========================================== !/usr/bin/env python -- coding: UTF-8 -- ''' A remote-exploit against the aircrack-ng tools. Tested up to svn r1675...

Remote Exploit Against the Aircrack-NG Tools svn r1675

No description provided by source. !/usr/bin/env python -- coding: UTF-8 -- ''' A remote-exploit against the aircrack-ng tools. Tested up to svn r1675. The tools' code responsible for parsing IEEE802.11-packets assumes the self-proclaimed length of a EAPOL-packet to be correct and never to exceed...

Aircrack-NG Tools svn r1675 - Remote Heap Buffer Overflow (PoC)

Aircrack-NG Tools svn r1675 - Remote Heap Buffer Overflow PoC !/usr/bin/env python -- coding: UTF-8 -- ''' A remote-exploit against the aircrack-ng tools. Tested up to svn r1675. The tools' code responsible for parsing IEEE802.11-packets assumes the self-proclaimed length of a EAPOL-packet to be...

Aircrack-NG Tools svn r1675 - Remote Heap Buffer Overflow (PoC)

!/usr/bin/env python -- coding: UTF-8 -- ''' A remote-exploit against the aircrack-ng tools. Tested up to svn r1675. The tools' code responsible for parsing IEEE802.11-packets assumes the self-proclaimed length of a EAPOL-packet to be correct and never to exceed a arbitrary maximum size of 256...

aircrack-ng buffer overflow

Buffer overflow on IEEE 802.11 EAPOL parsing...

Remote buffer overflow in aircrack-ng causes DOS and possible code execution

We can cause aircrack-ng and airdecap-ng to crash when reading specially crafted dump-files and can also crash remote airodump-ng sessions by sending specially crafted packets over the air. I am 90 sure that this denial-of-service can be escalated to remote-code-execution by carefully introducing...

OCS Inventory NG Server <= 1.3b3 (login) Remote Authentication Bypass

OCS Inventory NG Server = 1.3b3 login Remote Authentication Bypass Software : Open Computer and Software OCS Inventory NG Download : http://www.ocsinventory-ng.org/ Discovered by : Nicolas DEROUET nicolas.derouetgmailcom Version : 1.03-beta3 and prior Impact : Critical Remote : Yes No...

OCS Inventory NG Server Administration Console Detection

The remote web server is hosting the OCS Inventory NG Server Administration console, a PHP application for managing computing assets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid44392; scriptversion"1.11";...

OCS Inventory NG Server 1.3b3 Remote Authentication Bypass

OCS Inventory NG Server passwd != md5 $POST"pass" and 111 $row-passwd != $POST"pass" == Exploit == function inject document.getElementById'log'.action = document.getElementById'ocsreports'.value + 'index.php'; sql = "0' UNION SELECT id, accesslv...

CVE-2009-3042

SQL injection vulnerability in machine.php in Open Computer and Software OCS Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040...

DEBIAN-CVE-2009-3042

SQL injection vulnerability in machine.php in Open Computer and Software OCS Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040...

CVE-2009-3040

Multiple SQL injection vulnerabilities in Open Computer and Software OCS Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the 1 N, 2 DL, 3 O and 4 V parameters to download.php and the 5 SYSTEMID parameter to groupshow.php...