84 matches found
Telefonica O2 Connection Manager 8.7 Service Trusted Path Privilege Escalation
The O2 Connection Manager's service suffers from an unquoted search path issue impacting the Import WiFi 'TGCMImportWiFiSvc' service for Windows. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. A successful...
Telefonica O2 Connection Manager 8.7 Service Trusted Path Privilege Escalation
Summary O2 Connection Manager will help you to manage your internet connections by getting you connected to the fastest available network. Automatically connect you to the fastest available network including your home broadband if you have a wireless router. Description The O2 Connection Manager'...
Telefonica O2 Connection Manager 3.4 Local Privilege Escalation Vulnerability
Summary O2 Connection Manager will help you to manage your internet connections by getting you connected to the fastest available network. Automatically connect you to the fastest available network including your home broadband if you have a wireless router. Description O2 Connection Manager...
CMS Agencija O2 Cross Site Scripting / SQL Injection Vulnerabilities
CMS Agencija O2 suffers from cross site scripting and remote SQL injection vulnerabilities. SQL Injection & XSS on CMS Agencija O2 Risk: High CWE number: CWE-89,CWE-79 Date: 22/08/2014 Vendor: Agencija O2 Author: Felipe " Renzi " Gabriel Contact: email protected Tested on: Windows 8 pro & Linux...
CMS Agencija O2 Cross Site Scripting / SQL Injection
SQL Injection & XSS on CMS Agencija O2 Risk: High CWE number: CWE-89,CWE-79 Date: 22/08/2014 Vendor: Agencija O2 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Windows 8 pro & Linux Mint Vulnerable File: category.php Exploits: http://host/cms/category.php?qcatid=SQLI & X...
Ubuntu 12.04.0-2LTS x64 perf_swevent_init - Kernel Local Root Exploit
Exploit for linux platform in category local exploits / Ubuntu 12.04 3.x x8664 perfsweventinit Local root exploit by Vitaly Nikolenko email protected based on semtex.c by sd Supported targets: 0 Ubuntu 12.04.0 - 3.2.0-23-generic 1 Ubuntu 12.04.1 - 3.2.0-29-generic 2 Ubuntu 12.04.2 -...
Developing and Sharing Tools for Professional Hackers
Professional hackers or security testers tend to write a lot of code. We write exploit code, fuzzers, code to handle esoteric protocols and data structures, unpackers, disassemblers, reversers, parsers, and so much more. We write this code because often what we’re doing is so specific that is...
CVE-2011-0746
Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...
CVE-2011-0746
Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...
CVE-2011-0746
The CVE-2011-0746 entry documents a CSRF/XSS vulnerability in the ZyXEL O2 DSL Router Classic. The issue is in the web form /Forms/PortForwarding_Edit_1 where the PortRule_Name parameter can be used to insert XSS payloads, enabling remote attackers to hijack administrator authentication for craft...
O2 DSL Router Classic router crossite scripting
Crossite scripting in administration interface...
O2 classic router: persistent cross site scripting (XSS) and cross site request forgery (CSRF)
O2 classic router: persistent cross site scripting XSS and cross site request forgery CSRF References https://vulners.com/cve/CVE-2010-1482 http://int21.de/cve/CVE-2011-0746-o2-router.html Description The default DSL router shipped by the german company O2 is completely vulnerable to persistent...
O2 Classic Router Cross Site Request Forgery / Cross Site Scripting
O2 classic router: persistent cross site scripting XSS and cross site request forgery CSRF References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1482 http://int21.de/cve/CVE-2011-0746-o2-router.html Description The default DSL router shipped by the german company O2 is completely...
grape-rfi.txt
Name : Grape Web Statistics Remote File include Vulnerability Download From :http://www.quate.net/link.php?grape Found By : MajnOoNxHaCkEr Home Page : http://www.4rxh.com ============================================================================ Vulne Code In File functions.php : Function:...
Grape Statistics 0.2a - location Remote File Inclusion
Grape Statistics 0.2a - location Remote File Inclusion Name : Grape Web Statistics Remote File include Vulnerability Download From :http://www.quate.net/link.php?grape Found By : MajnOoNxHaCkEr Home Page : http://www.4rxh.com...
Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow
/ THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 - details added, minor changes v0.1 - first release Greetz to al...
CVE-2002-2093
The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin...
CVE-2002-2093
The CVE-2002-2093 entry concerns SGI O2/IRIX 6.5, where the Video Control Panel can permit a user to gain a console session when the Default Input is set to “Output Video.” Attacks involve running videoout followed by videoin to access a console. The available documents confirm the affected produ...