CVE-2005-4437

MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...

CVE-2005-4437

CVE-2005-4437 describes a vulnerability in Extended Interior Gateway Routing Protocol (EIGRP) 1.2 as implemented in Cisco IOS 11.3 and later, where the MD5 neighbor authentication does not include the Message Authentication Code (MAC) in the checksum. This enables remote attackers to sniff messag...

Unpassworded 'bash' account

The account SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15583";...

Dynamic Network access version of the storm log library ultimate law-vulnerability and early warning-the black bar safety net

| Dynamic Network access version of the storm log Library The Ultimate Law of the --- | Note:need to obtain a front Desk administrator permissions after use Articles specified in the recycle. asp?...

CVE-2004-2371

Technical details for CVE-2004-2371 are not publicly provided in the connected documents. The initial description lacks vendor/product/version specifics or a remediation. Monitor for updates.

CVE-2004-2371

Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service hang via packets that contain text strings...

CVE-2005-2487

Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service connectivity and array access loss via a network broadcast storm...

CVE-2005-2487

CVE-2005-2487 affects Sun McData switches and directors 4300, 4500, 6064 and 6140 prior to E/OS 6.0.0. The vulnerability may allow a denial-of-service impacting connectivity and array access through a network broadcast storm. The provided documents indicate the affected components and the likely ...

CVE-2005-2487

Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service connectivity and array access loss via a network broadcast storm...

SUN McDATA switches broadcast storm

Device replyes to the packets with broadcast source address making it possible to DoS network with broadcast strom...

CVE-2004-1566

Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...

CVE-2004-1567

profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...

CVE-2004-1566

CVE-2004-1566 : The Silent-Storm Portal (versions 2.1 and 2.2) contains a cross-site scripting (XSS) flaw in index.php via the module parameter. This enables a remote attacker to inject and execute arbitrary web script or HTML in the victim’s browser. The vulnerability is tied to improper handlin...

CVE-2004-1567

Silent Storm Portal (2.1/2.2) exposes a privilege escalation in profile.php: setting the mail parameter to 1 (the admin value) allows remote attackers to gain administrator privileges. Vulnerable parameter handling is the root cause; the CVE entry documents this as an admin-privilege bypass via a...

CVE-2004-1566

Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...

CVE-2004-1567

profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...

CVE-2004-2371

Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service hang via packets that contain text strings...

silentstorm.txt

CHT Security Research-2004 http://www.CyberSpy.Org Turkey Software: Silent Storm Portal Web Site: http://www.silent-storm.co.uk/ssp/ Affected Versions: 2.1,2.2 Description: Silent Storm Portal is a PHP based portal system.It requires PHP4 or above.no MySQL needed. Multiple Vulnerabilities in Sile...

[SA12704] Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities

TITLE: Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities SECUNIA ADVISORY ID: SA12704 VERIFY ADVISORY: http://secunia.com/advisories/12704/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Silent Storm Portal...

Silent Storm Portal Multiple Vulnerabilities

No description provided by source. Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- form method="post" action="http://www.victim.com/index.php?module=../../profile" input type="text" name="mail" value="any mail com"br input type="hidden" name="mail"...