881 matches found
Real Networks GameHouse dldisplay ActiveX control 0 Port Buffer Overflow (1)
No description provided by source. source: http://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the corre...
Ruslan Communications <Body>Builder SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5008/info Ruslan Communications BodyBuilder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java. Reportedly, user input suppli...
SAMBA 2.0.7 SWAT Logfile Permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1874/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...
symantec mail-gear 1.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/827/info Mail-Gear, a multi-purpose filtering email server, includes a webserver for remote administration and email retrieval. This webserver is vulnerable to the '../' directory traversal attack. By including the string...
Novell Netware 5.1 - Remote Administration Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, and if sent a GET request ...
Real Networks GameHouse dldisplay ActiveX control 0 Port Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the corre...
AltaVista Search Intranet 2.0 b/2.3 A Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/896/info The AltaVista Search engine sets up a webserver at port 9000 to listen for search queries. The main search function will accept a single '../' string in the query, providing access to all documents in the 'http'...
Verizon Fios Router MI424WR-GEN3I - CSRF Vulnerability
No description provided by source. Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36 http://verizon.com CVE: CVE-2013-01...
CVE-2014-3810
Dolphin (BoonEx)
FBI Arrests 100 Hackers linked to Blackshades Malware
On Friday, we reported about the large-scale operation of International raids launched by the FBI and other law enforcement officials in countries around the world to arrest the targeted customers of a popular Remote Administration Tool RAT called ‘Blackshades,’ which is designed to take over the...
FBI raids BlackShades RAT Malware Customers in Europe and Australia
When it comes to crime, whether it’s an online or offline, FBI doesn't spare anyone. According to the French media reports and various announcements on underground forums by hacking groups, the FBI has started a large-scale operation of International raids with the help of local law enforcement...
CVE-2013-3514
Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. dot dot in the group parameter to 1 plugin-preferences.php or 2 plugin-settings.php in www/admin, a different vulnerability than CVE-2013-7376. NOTE: thi...
AVG Remote Administration multiple security vulnerabilities
Authentication bypass, code execution, static encryption key...
SEC Consult SA-20140508-0 :: Multiple critical vulnerabilities in AVG Remote Administration
SEC Consult Vulnerability Lab Security Advisory 20140508-0 ======================================================================= title: Multiple critical vulnerabilities product: AVG Remote Administration vulnerable version: all - except issue 2 fixed version: none - except issue 2 impact:...
AVG Remote Administration Bypass / Code Execution / Static Keys AVG Remote Administration Bypass /
AVG Remote Administration version 13.0.0.2892 suffers from authentication bypass, remote code execution, missing entity authentication, and use of static encryption key vulnerabilities. title: Multiple critical vulnerabilities product: AVG Remote Administration vulnerable version: all - except...
AVG Remote Administration Bypass / Code Execution / Static Keys
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: AVG Remote Administration vulnerable version: all - except issue 2 fixed version: none - except issue 2 impact: critical...
PYSEC-2014-68
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API...
Command injection
The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...
CVE-2013-5401
The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...
PT-2014-2922
Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ Internet Pass-Thru MQIPT versions 2.0 through 2.1.0.0 Description The issue affects the command-port listener, allowing remote attackers to cause a denial of service, which results in a remote-administration outage. The exact...