IBM GCM16 / GCM32 Global Console Manager KVM Switch Detection

Binary data ibmgcmkvmdetect.nbin...

IBM GCM16/32 1.20.0.22575 - 多个漏洞

No description provided by source. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and probably other vendor...

IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities

Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and probably other vendors of this rebranded KVM. I contacte...

PacketFence v4.3.0 - Free and Open Source network access control (NAC) solution

PacketFence is a fully supported , trusted , Free and Open Source network access control NAC solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, powerful BYOD management options, 802.1X support, layer...

Infoblox 6.8.2.11 - OS Command Injection

No description provided by source. Product: Network Automation, licensed as: • NetMRI • Switch Port Manager • Automation Change Manager • Security Device Controller Vendor: Infoblox Vulnerable Versions: 6.4.X.X-6.8.4.X Tested Version: 6.8.2.11 Vendor Notification: May 12th, 2014 Vendor Patch...

FengCMS新版本重装

简要描述： FengCms Beta 1.20 管理这样判断冒是那里不对啊。 详细说明： 用switch做判断，真的搞不懂程序猿是怎么想的啊，这里的step变量可以控制，导致重装程序。 switch$GET'step' case '1': //安装许可协议 include ABSPATH."/step/step1.php"; break; case '2': //检查安装环境是否满足要求 $PHPGD = ''; ifextensionloaded'gd' iffunctionexists'imagepng' $PHPGD .= 'png';...

Netgear GS105PE Prosafe Plus Switch contains hard-coded login credentials

Overview Netgear GS105PE Prosafe Plus Switch firmware version 1.2.0.5 contains hard-coded credentials. CWE-798 Description Netgear GS105PE Prosafe Plus Switch contains hard-coded login credentials that can be used for authenticating to the web server running on the device. The username is ntgruse...

YaSoft Switch Off 2.3 swnet.dll Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9340/info A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the 'swnet.dll' module of the software due to insufficient...

Avaya Cajun P130/P133/P330/P333 Network Switch Connection Stalling Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/7961/info It has been reported that Cajun switches do not properly handle traffic to port 4000. Because of this, an attacker may be able to cause the switch to stall for period of time. The following proof of concept stri...

Cisco IOS <= 12.0.2 Syslog Crash

No description provided by source. source: http://www.securityfocus.com/bid/675/info Cisco devices running classic IOS are reported prone to a denial of service vulnerability. The issue occurs when a vulnerable device receives and processes a UDP packet on UDP port 514 for syslog. This issue...

Marconi ASX-1000 Administration Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2400/info ASX-1000 Switches are hardware packages developed by Marconi Corporation. ASX-1000 Switches can be used to regulate ATM networks, performing layer-3 switching. A problem with the switch could allow a management...

Netrek 2.12.0 - pmessage2() Remote Limited Format String Exploit

No description provided by source. Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Sendmail 8.11/8.12 Debugger Arbitrary Code Execution Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments...

YaSoft Switch Off 2.3 Large Packet Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9339/info A problem has been identified in the YaSoft Switch Off software package when handling large packets via the service management port 8000/TCP. This may make it possible for a remote user to deny service to...

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution

No description provided by source. I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5 III. Vulnerability...

HP ProCurve Switch 4000M SNMP Write Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5336/info An issue has been reported with the HP ProCurve 4000M Switch. An attacker with SNMP write access to the device may write to the SNMP variable .iso.3.6.1.4.1.11.2.36.1.1.2.1.0. If more than 85 characters are...

Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability

No description provided by source. Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert Grądek PL Software Link: download link if available Tested on: HP-E2620 24-PoEP // RA.15.05.0006,ROMRA.15.10 HTTP Headers:...

Nortel CVX 1800 Multi-Service Access Switch Default SNMP Community Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4507/info Nortel CVX 1800 Multi-Service Access Switch is a hardware modem bank. The device contains a default SNMP community string of public, which may allow enable a remote attacker to gain access to sensitive informati...

Switch Sound File Converter .mpga BOF DoS

No description provided by source. Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Greetz to Corelan team and Peter Van...

SSH 1.2.x CRC-32 Compensation Attack Detector Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2347/info Secure Shell, or SSH, is an encrypted remote access protocol. SSH or code based on SSH is used by many systems all over the world and in a wide variety of commercial applications. An integer-overflow bug in the...