2869 matches found
[Full-disclosure] MPM HP-180W VoIP wireless desktop phone undocumented port UDP/9090
I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: MPM - http://www.mpn.com.tw VENDOR NOTIFIED: 7...
Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Default Administrative Password in Cisco Security Monitoring, Analysis ====================================================================== and Response System CS-MARS =============================...
Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net
The author of the article: root webmasteratxfocus.org Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version:...
eazyCMS "page_id" SQL Injection Vulnerability
eazyCMS "pageid" SQL Injection Vulnerability author:r0t hackers.by.lv Date:18 nov. 2005 software: eazyCMS v2 vendor:http://www.eazycms.com/home.php?pageid=2 Software Description: eazyCMS offers the functionality that would, in a custom-made system, cost thousands or tens of thousands - and it's a...
[SA17581] Openswan ISAKMP IKE Message Processing Denial of Service
TITLE: Openswan ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17581 VERIFY ADVISORY: http://secunia.com/advisories/17581/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Openswan 2.x http://secunia.com/product/3624/ DESCRIPTION: Two vulnerabilities...
Cisco bug ID CSCdu35577 (Web Check)
The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. OpenVAS Vulnerability Test $Id: CSCdu35577web.nasl 8023 2017-12-07...
Pinnacle ShowCenter Skin DoS
The remote host runs the Pinnacle ShowCenter web based interface. The remote version of this software is vulnerable to a remote denial of service due to a lack of sanity checks on skin parameter. With a specially crafted URL, an attacker can deny service of the ShowCenter web based interface...
BlackBoard Internet Newsboard System remote file include flaw
The remote version of BlackBoard Internet Newsboard System is vulnerable to a remote file include flaw due to a lack of sanitization of user-supplied data. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
phpBB 2.0.17 remote avatar size bug
Title: phpBB remote avatar size bug Software: phpBB 2.0.17 and maybe prior versions Discovered by: David Sopas Ferreira david at systemsecure dot org Original link: http://www.systemsecure.org/ssforum/viewtopic.php?t=272 » Email from phpBB « Your report "Avatar size" has been closed because your...
smf105.txt
Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...
Cisco Security Advisory: IPv6 Crafted Packet Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IPv6 Crafted Packet Vulnerability Revision 1.0 For Public Release 2005 July 29 0800 UTC - ------------------------------------------------------------------------------- Contents ======== Summary Affected Products Details Impa...
MRV In-Reach console server: Port Access Control Bypass Vulnerability
Hi, this is another bug I encountered during my research on console servers. Summary: Port Access Control Bypass Vulnerability on MRVs In-Reach console servers. Details: MRV's In-Reach console servers come with feature that enables access to their ports by ssh public keys. As opposed to e.g...
wms_poc.pl.txt
SoftiaCom MailServer v2.0 - Denial Of Service Software: wMailServer Corporation: SoftiaCom Software Version: v1.0 v2.0 is the same... Vulnerability: Denial of Service ------------------------------------------ BACKGROUND SoftiaCom design and build software utilities in communication and network...
[SA15332] Nuke ET "codigo" Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Nuke ET "codigo" Cross-Site Scripting Vulnerability...
[SA14433] PostNuke Multiple Vulnerabilities
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
[SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities
SIG^2 Vulnerability Research Advisory RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities by Tan Chew Keong Release Date: 01 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/raidenhttpd1132.html SUMMARY RaidenHTTPD Server http://www.raidenhttpd.com/en/index.html is a...
Thomson TCW690 POST Password Validation Exploit
No description provided by source. / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK murdok.lnx at gmail.com Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690...
Thomson TCW690 - POST Password Validation
Thomson TCW690 - POST Password Validation / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690 POST Password...
HP-UX PHCO_27373 : HPSBUX0208-210 Sec. Vulnerability in VVOS passwd(1) (rev. 2)
s700800 11.04 VVOS cumulative passwd1 patch : Unexpected behavior using passwd1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27373. The text itself is copyright C Hewlett-Packard Development Company, L....
