458 matches found
Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS
No description provided by source. Exploit Title: HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS Date: date: 17/09/10 Author: d0lc3 @rmallof http://elotrolad0.blogspot.com/ Software Link: http://www.hp.com Version: 6.11 Tested on: Windows XP SP3 Spa Sumary: HP Dat...
[fwknop] Single Packet Authorization and Port Knocking
fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization SPA. This method of authorization is based around a default-drop packet filter fwknop supports iptables on Linux, ipfw on FreeBSD and Mac OS X, and PF on OpenBSD and libpcap...
[Kvasir] Tools for effective data management during a Penetration Test
Welcome to Kvasir! Herein these directories lay the groundwork tools for effective data management during a Penetration Test. Penetration tests can be data management nightmares because of the large amounts of information that is generally obtained. Vulnerability scanners return lots of actual an...
Fedora Core 3 : exim-4.43-1.FC3.1 (2005-002)
This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function hostaton can overflow a buffer...
Cross site scripting
Cross-site scripting XSS vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 before 5.2.13, and SPA 500 series IP phones before 7.4.9 allows remote attackers to inject arbitrary web script or HTML via the FROM field of an INVITE message, aka...
CVE-2011-2545
CVE-2011-2545 is a cross-site scripting (XSS) vulnerability in the SIP INVITE FROM field handling of Cisco SPA 8000/8800 (before 6.1.11), SPA2102 and SPA3102 (before 5.2.13), and SPA 500 series IP phones (before 7.4.9). Root cause: lack of input sanitization in the SIP INVITE FROM field. Impact: ...
CVE-2011-2545
Cross-site scripting XSS vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 before 5.2.13, and SPA 500 series IP phones before 7.4.9 allows remote attackers to inject arbitrary web script or HTML via the FROM field of an INVITE message, aka...
Authentication flaw
Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768...
CVE-2012-0333
Cisco Small Business IP phones (SPA 500 series) with firmware 7.4.9 and earlier are affected by CVE-2012-0333 because Push XML requests do not require authentication, enabling remote attackers to initiate calls via crafted XML (Bug CSCts08768). Affected product: SPA 500 series; root cause: unauth...
Icona SpA C6 Messenger Downloader Arbitrary File Download / Execute
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Icona SpA C6...
Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Execute
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
Icona SpA C6 Messenger - DownloaderActiveX Control Arbitrary File Download and Execute (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Icona SpA C6...
Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute
This module exploits a vulnerability in Icona SpA C6 Messenger 1.0.0.1. The vulnerability is in the DownloaderActiveX Control DownloaderActiveX.ocx. The insecure control can be abused to download and execute arbitrary files in the context of the currently logged-on user. This module requires...
CVE-2011-1651
Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...
Code injection
Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...
CVE-2011-1651
Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...
CVE-2011-1651
Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...
CVE-2011-1651
CVE-2011-1651 affects Cisco IOS XR on Cisco XR 12000 Series with a Shared Port Adapters (SPA) Interface Processor. A crafted IPv4 packet sent to an affected device can trigger a reload of the SPA interface processor, causing a denial-of-service condition (device reload). Affected software version...
