Default credentials

modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters...

CVE-2014-2269

modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters...

IBM Tivoli Endpoint Manager Server 9.0.777 (patch 2) LDAP and AD Authentication

According to its self-reported version, IBM Tivoli Endpoint Manager Server 9.0.777.0 patch 2 is installed on the remote host. It is, therefore, affected by a vulnerability that could allow an attacker to impersonate any LDAP-authenticated Console user when LDAP and Active Directory authentication...

McAfee VirusScan Enterprise本地权限提升漏洞

BUGTRAQ ID: 58163 McAfee VirusScan是一款流行的实时病毒保护应用程序。 McAfee VirusScan Enterprise 8.8 Patch 2在管理员开启了访问保护后，VSE的一个组件允许权限提升，通过身份验证的用户可利用此漏洞提升权限。此漏洞影响关闭了访问保护和自保护的VSE 8.8 Patch 2。 0 McAfee VirusScan Enterprise 8.8 Patch 2 厂商补丁： McAfee ------ McAfee已经为此发布了一个安全公告（SB10038）以及相应补丁: SB10038：McAfee Security...

Novell GroupWise Client 8.x < 8.0.3 Hot Patch 2 / 2012.x < 2012 SP1 Hot Patch 1 Multiple Vulnerabilities

The version of Novell GroupWise Client installed on the remote Windows host is 8.x prior to 8.0.3 Hot Patch 2 8.0.3.26516 or 2012.x prior to 2012 SP1 Hot Patch 1 12.0.1.16521. It is, therefore, reportedly affected by the following vulnerabilities : - An unspecified error exists related to an...

Novell NCP Pre-Auth Remote Stack Buffer Overflow

/ Novell NCP Pre-Auth Remote Root Exploit Written by Gary Nilson 11-17-2013 Overview US-CERT/NIST CVES:CVE-2012-0432: Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors...

Directory traversal

Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors...

CVE-2012-2387

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack...

CVE-2012-2387

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack...

CVE-2012-2387

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack...

CVE-2011-5058

The CVE-2011-5058 entry affects 3S CoDeSys 3.4 SP4 Patch 2: the CmbWebserver.dll in the Control service allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory with backslash characters in an HTTP GET request. This is the concrete vulnerab...

CVE-2011-5058: Undefined Security Weakness

The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ backslash characters in an HTTP GET request...

CVE-2011-5008

CVE-2011-5008 is an integer overflow in the GatewayService of 3S CoDeSys (versions affected: CoDeSys 2.3 and 3.4; patched in V3.5 and V2.3.9.32). A large size value in the packet header enables remote attackers to trigger a heap-based buffer overflow and potentially execute arbitrary code. Attack...

CVE-2011-5007

Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080...

CVE-2011-5009: Undefined Security Weakness

The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service NULL pointer dereference via 1 a crafted Content-Length in an HTTP POST or 2 an invalid HTTP request method...

Codesys CmpWebServer Multiple Vulnerabilities

Codesys is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SCADA 3S CoDeSys CmpWebServer Stack Buffer Overflow

This module exploits a remote stack buffer overflow vulnerability in 3S-Smart Software Solutions product CoDeSys Scada Web Server Version 1.1.9.9. This vulnerability affects versions 3.4 SP4 Patch 2 and earlier. Module Options msf use exploit/windows/scada/codesys/webserver msf undefinedwebserver...

TeamMate Audit Management Software Suite - mfc71enu.dll DLL Hijacking

TeamMate Audit Management Software Suite - mfc71enu.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: TeamMate Audit Management Software Suite DLL Hijacking Date:...

Sun Java System Access Manager 7.1 < Patch 2 Multiple Vulnerabilities

Binary data 5132.prm...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...