2879 matches found
Aruba Mobility Controller vulnerable to privilege escalation
Overview The Aruba Mobility Controller Management Interface contains a privilege escalation vulnerability. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Aruba Mobility Controllers are used to process and control network traffic in...
Symantec Web Security多个拒绝服务和跨站脚本漏洞
Symantec Web Security安全产品不正确检查嵌入在HTML标记中，包含错误或者阻止页消息的返回给客户端的URL。 攻击者可以嵌入恶意命令到部分URL，客户端浏览器将执行恶意命令。目前没有详细漏洞细节提供。 Symantec Web Security 3.0.1 build 3.01.68 Symantec Web Security 3.0.1 build 3.01.67 Symantec Web Security 3.0.1 build 3.01.63 Symantec Web Security 3.0.1 build 3.01.62 Symantec Web...
Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ========================================================== Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit ========================================================== // kav 6.0 0day local priv escalation exploit // by m4d //...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
No description provided by source. ===========================================================br / Yee7TeaMbr / br / WwW.Yee7.CoMbr / ===========================================================br / br / Software: Phorum v3.2.11br / br / Vendor: http://www.phorum.org/br / br / Download:...
New Bug MiniBB Forum <= 2 Remote File Include (index.php)
Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...
TIBCO Rendezvous <= 7.4.11 (add router) Remote BOF Exploit
Exploit for unknown platform in category remote exploits ========================================================== TIBCO Rendezvous = 7.4.11 add router Remote BOF Exploit ========================================================== / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win...
CVE-2006-3410
Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks...
Somechess v1.5 rc1 - XSS
Somechess v1.5 rc1 Homepage: http://www.astrodogpress.org/chess/ Affected files: Profile input boxes ----------------------- Upon dumping the sql data into the table if you get errors and it wont create the tables & data like it did to me, then just remove all the " from the sql file. You'll also...
[MajorSecurity #10]i.List <= 1.5 - XSS
MajorSecurity 10i.List = 1.5 - XSS ---------------------------------------- Software: i.List Version: =1.5 Type: XSS Date: June, 8th 2006 Vendor: Skoom Page: http://skoom.de Credits: ------------------------------- David 'Aesthetico' Vieira-Kurz http://www.majorsecurity.de Affected Products:...
Creative Software UK Community Portal 1.1 - 'EventView.php?event_id' SQL Injection
source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
[Full-disclosure] MPM HP-180W VoIP wireless desktop phone undocumented port UDP/9090
I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: MPM - http://www.mpn.com.tw VENDOR NOTIFIED: 7...
Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Default Administrative Password in Cisco Security Monitoring, Analysis ====================================================================== and Response System CS-MARS =============================...
Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net
The author of the article: root webmasteratxfocus.org Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version:...
eazyCMS "page_id" SQL Injection Vulnerability
eazyCMS "pageid" SQL Injection Vulnerability author:r0t hackers.by.lv Date:18 nov. 2005 software: eazyCMS v2 vendor:http://www.eazycms.com/home.php?pageid=2 Software Description: eazyCMS offers the functionality that would, in a custom-made system, cost thousands or tens of thousands - and it's a...
[SA17581] Openswan ISAKMP IKE Message Processing Denial of Service
TITLE: Openswan ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17581 VERIFY ADVISORY: http://secunia.com/advisories/17581/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Openswan 2.x http://secunia.com/product/3624/ DESCRIPTION: Two vulnerabilities...
Cisco bug ID CSCdu35577 (Web Check)
The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. OpenVAS Vulnerability Test $Id: CSCdu35577web.nasl 8023 2017-12-07...
Pinnacle ShowCenter Skin DoS
The remote host runs the Pinnacle ShowCenter web based interface. The remote version of this software is vulnerable to a remote denial of service due to a lack of sanity checks on skin parameter. With a specially crafted URL, an attacker can deny service of the ShowCenter web based interface...
BlackBoard Internet Newsboard System remote file include flaw
The remote version of BlackBoard Internet Newsboard System is vulnerable to a remote file include flaw due to a lack of sanitization of user-supplied data. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
phpBB 2.0.17 remote avatar size bug
Title: phpBB remote avatar size bug Software: phpBB 2.0.17 and maybe prior versions Discovered by: David Sopas Ferreira david at systemsecure dot org Original link: http://www.systemsecure.org/ssforum/viewtopic.php?t=272 » Email from phpBB « Your report "Avatar size" has been closed because your...
smf105.txt
Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...