Lucene search
+L

1008 matches found

Prion
Prion
added 2007/06/01 1:30 a.m.20 views

Design/Logic Flaw

The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...

7.5CVSS8.4AI score0.02541EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2007/06/01 1:30 a.m.17 views

CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...

7.5CVSS7.8AI score0.02541EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2007/06/01 1:00 a.m.26 views

CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...

7.8AI score0.02541EPSS
SaveExploits0References5
CVE
CVE
added 2007/06/01 1:00 a.m.54 views

CVE-2007-2975

CVE-2007-2975 affects Ignite Realtime Openfire 3.3.0 and earlier (Wildfire). The root cause is an improper filter mapping specification in web.xml for the admin console, allowing remote attackers to gain privileges and execute arbitrary code via functionality exposed through DWR (demonstrated usi...

7.5CVSS7.8AI score0.02541EPSS
SaveExploits0References5Affected Software1
seebug.org
seebug.org
added 2007/02/07 12:00 a.m.32 views

solaris/sparc connect-back (with XNOR encoded session) 600 bytes

No description provided by source. / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o is encoded using a simple NOT algo before being transmitted on the wire...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2006/02/08 12:00 a.m.49 views

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability

QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use...

1.2AI score
SaveExploits0
NVD
NVD
added 2002/12/31 5:00 a.m.23 views

CVE-2002-2041

Multiple buffer overflows in realtime operating system RTOS 6.1.0 allows local users to execute arbitrary code via 1 a long ABLANG environment variable in phlocale or 2 a long -u option to pkg-installer...

7.2CVSS7.4AI score0.01237EPSS
SaveExploits3References5
NVD
NVD
added 2002/12/31 5:00 a.m.23 views

CVE-2002-2039

/bin/su in QNX realtime operating system RTOS 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV invalid memory reference signal...

2.1CVSS5.8AI score0.00844EPSS
SaveExploits2References3
Rows per page
Query Builder