CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-6411

The CVE-2006-6411 entry affects Linksys WIP 330 Wireless-G IP Phone, version 1.00.06A, where PhoneCtrl.exe is vulnerable. The underlying issue permits remote denial of service (crash) via a TCP SYN scan, demonstrated by scanning TCP ports 1–65535 with nmap. The public description explicitly state...

Linksys WIP 330 VoIP wireless phone DoS

nmap scan causes device to crash...

Linksys WIP 330 VoIP wireless phone crash from Nmap scan

Vulnerability Description ================== The Linksys WIP 330 VoIP wireless phone will crash when a full port-range Nmap scan is run against its IP address. Linksys WIP 330 Firmware Version ========================== 1.00.06A Nmap scan command ================ nmap -P0 WIP 330 ip address -p...

onlineer-20.txt

User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! --...

Online Event Registration 2.0 - save_profile.asp Pass Change

Online Event Registration 2.0 - saveprofile.asp Pass Change User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-11-13...

Hawking Technology wireless router WR254-CA DNS issue

Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...

CVE-2006-5231

CVE-2006-5231 affects the Grandstream GXP-2000 VoIP Desktop Phone (firmware 1.1.0.5). The vulnerability allows remote attackers to cause a denial of service (hang or reboot) by sending a large amount of ASCII data to UDP ports 5060, 5062, 5064, 5066, 9876, or 26789. The impact is described as ava...

Cisco IP Phone Detection

Binary data 3771.prm...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

CharonCartv3.txt

Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms

A vulnerability exists in certain Cisco IOS ® software release trains running on the Cisco IAD2400 series, 1900 Series Mobile Wireless Edge Routers and Cisco VG224 Analog Phone Gateways. Vulnerable versions may contain a default hard-coded Simple Network Management Protocol SNMP community string...

Charon Cart v3 (Review.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Charon Cart v3 Review.asp Remote SQL Injection Vulnerability ============================================================== Vulnerability Report Title : Charon Cart v3Review.as...

Charon Cart 3.0 - 'Review.asp' SQL Injection

Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

Charon Cart v3 (Review.asp) Remote SQL Injection Vulnerability

No description provided by source. Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

Charon Cart 3.0 - Review.asp SQL Injection

Charon Cart 3.0 - Review.asp SQL Injection Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

AgePhone software SIP IP phone buffer overflow

Buffer overflow on SIP packet parsing...

Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks

I. SYNOPSIS Release Date: 07/19/2006 Affected Application: Cisco CallManager 3.1 and up versions prior to 3.1 were not tested but may still be vulnerable Severity If Exploited: High Impact: Arbitrary configuration of phone system/Theft of individual phone users' credentials Mitigating Factors:...

IAXClient Open Source Library iax_net_read Function Packet Handling Remote Overflow

The remote host appears to be using a VoIP software phone application that is affected by multiple buffer overflows. With specially crafted UDP packets, an unauthenticated, remote attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the...

[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1048-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2006 http://www.debian.org/security/faq -...