Snare Agent Linux Password Disclosure / CSRF Vulnerabilities

Snare for Linux ships with a web interface that can be used for viewing log data and configuring the agent. In the web interface at /remote, a user is able to set a password for remote configuration of the agent. The rendered page contains the field "RemotePassword" with its input type set to...

Lantronix Remote Configuration Protocol Password Disclosure

Lantronix Devices are prone to a Password Disclosure via the remote configuration protocol. It was possible to retrieve the setup record from Lantronix devices via the config port 30718/udp or 30718/tcp, enabled by default and to extract the Telnet/HTTP password. Copyright C 2012 Greenbone Networ...

West Wind Web Connection Unprotected Configuration Editor Application

The remote host is running a web application that utilizes the West Wind Web Connection framework. Nessus was able to access the West Wind Web Connection framework configuration file editor without providing credentials. The configuration file editor allows remote configuration of the application...

cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability

Document Title: =============== cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=665 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 665...

CVE-2011-4659: Undefined Security Weakness

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than...

PT-2012-1939

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Software versions prior to 4.1.1 Description The issue is related to a default password for the root account after an upgrade to version 4.1.0, which allows remote attackers to modify the configuration via an SSH session...

Barracuda Networks Spam & Virus Firewall 4.1.1.021 - Remote Configuration Retrieval

!/bin/bash Exploit by ShadowHatesYou [email protected] The resulting output is an SQL dump containing the Barracuda's configuration, which includes goodies such as: The administrative password for the BSFsystempassword MTA LDAP passwordsmtaldapadvancedpassword Password for each configured...

Wordpress Firestats Remote Configuration File Download

Exploit for php platform in category web applications ====================================================== Wordpress Firestats Remote Configuration File Download ====================================================== Exploit Title: Wordpress firestats remote configuration file download Date:...

WordPress Plugin Firestats - Remote Configuration File Download

WordPress Plugin Firestats - Remote Configuration File Download Exploit Title: Wordpress firestats remote configuration file download Date: 2010-07-09 Author: Jelmer de Hen Software Link: http://firestats.cc/ Version: 1.6.5 Tested on: PHP Do a simple GET request to this file:...

WordPress Plugin Firestats - Remote Configuration File Download

Exploit Title: Wordpress firestats remote configuration file download Date: 2010-07-09 Author: Jelmer de Hen Software Link: http://firestats.cc/ Version: 1.6.5 Tested on: PHP Do a simple GET request to this file: /wp-content/plugins/firestats/php/tools/getconfig.php This will allow you to downloa...

CVE-2010-1574: Undefined Security Weakness

IOS 12.252SE and 12.252SE1 on Cisco Industrial Ethernet IE 3000 series switches has 1 a community name of public for RO access and 2 a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SN...

IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration

Security Advisory IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration Advisory Information -------------------- Published: 2010-06-28 Updated: 2010-06-28 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Publi...

D-Link DAP-1160 Unauthenticated Remote Configuration

Security Advisory IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration Advisory Information -------------------- Published: 2010-06-28 Updated: 2010-06-28 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Publi...

Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists with how the OS web-browser passes command line arguments ...

Radio istek scripti 2.5 Remote Configuration Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Radio istek scripti 2.5 Remote Configuration Disclosure Vulnerability =====================================================================...

Radio istek scripti 2.5 - Remote Configuration Disclosure

Radio istek scripti 2.5 - Remote Configuration Disclosure turkish radio php script ====================================================== RADIO istek scripti tr Version 2.5 tr Remote config Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site :...

Radio istek scripti 2.5 - Remote Configuration Disclosure

turkish radio php script ====================================================== RADIO istek scripti tr Version 2.5 tr Remote config Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org...

CVE-2009-1167: Undefined Security Weakness

Unspecified vulnerability on the Cisco Wireless LAN Controller WLC platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules WiSM, WLC Modules for Integrated Services Routers,...

phpAdBoard - 'conf.inc' Remote Configuration File Disclosure

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

QuoteBook - Remote Configuration File Disclosure

QuoteBook - Remote Configuration File Disclosure -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || //...