Gentoo Security Advisory GLSA 200504-01 (telnet)

The remote host is missing updates announced in advisory GLSA 200504-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200504-28 (Heimdal)

The remote host is missing updates announced in advisory GLSA 200504-28. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security flaw in Airtel DSL modems

Hi, I've found a few problems with the way DSL modems by a vendor Bharti and provided by Airtel an Indian ISP are setup. I've been talking with Airtel on this over the past couple of months to try to get them to close the vulnerability. They feel that they have addressed the issue appropriately...

Parallels Plesk Shortnames功能邮件中继漏洞

BUGTRAQ ID: 30956 Plesk是用于管理站点的综合控制面板解决方案。 在Plesk中如果为邮件登录启用了SHORTNAMES=1功能的话，QMAIL就会在AUTH LOGIN认证期间接受任何以有效shortname开始的base64编码用户名。这允许攻击者登录到plesk认证模块所保护的邮件或其他服务，通过获得的smtp认证权限中继垃圾邮件。 必须要从smtpspsa删除SHORTNAMES=1才可以修复这个问题，仅仅将其设置为0无法解决。 Parallels Plesk 8.6 Parallels ---------...

BIOS Info (SSH)

Using SMBIOS and UEFI, it was possible to get BIOS info. TRUSTED...

Unpassworded 'r00t' account

The account 'r00t' on the remote host has no password. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "r00t"; include'deprecatednasllevel.inc'; include'compat.inc'; if...

FreeBSD Ports: heimdal

The remote host is missing an update to the system as announced in the referenced advisory. VID b62c80c2-b81a-11da-bec5-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-05:01.telnet.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:01.telnet.asc ADV FreeBSD-SA-05:01.telnet.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

Default Password (bank) for 'bank' Account

The account 'bank' on the remote host has the default password 'bank'. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "bank"; password = "bank";...

FreeBSD Security Advisory (FreeBSD-SA-05:01.telnet.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:01.telnet.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

minix 3.1.2a tty panic Local Denial of Service Vulnerability

No description provided by source. kokanin@gmail 20080723 minix 3.1.2a tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ uname -a Minix 192.168.1.2 3 1.2a i686 $ while true ; do yes "yes yes minix uh ah"& ;...

Apache <= 1.3.31 mod_include Local Buffer Overflow Exploit

No description provided by source. / local exploit for modinclude of apache 1.3.x written by xCrZx /18.10.2004/ bug found by xCrZx /18.10.2004/ Successfully tested on apache 1.3.31 under Linux RH9.0Shrike / / Technical Details: there is an overflow in gettag function: static char gettagpool p, FI...

GoodTech Telnet Server < 5.0.7 Buffer Overflow Crash Exploit

No description provided by source. / GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professional sp2 operating...

PSOProxy 0.91 Remote Buffer Overflow Exploit (Win2k/XP)

No description provided by source. / Copyright ? Rosiello Security http www rosiello org ================ -== Remote Exploit for PSOProxy version v0.91 ==-- Code by: rave Contact: [email protected] Date: Feb 2004 Bug found by: Donato Ferrante There is a vulnerability found in the PSOProxy server...

Multiple Cisco Products Vulnerabilities Exploit (Cisco Global Exploiter)

No description provided by source. !/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main ...

VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal

!/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin http://www.be4mind.com - http://www.gray-world.net WE CODED IT JUST FOR FUN ; Cheers to...

VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal

VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal !/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin...

Aruba Mobility Controller绕过认证及跨站脚本漏洞

BUGTRAQ ID: 29240 Aruba Mobility Controller可为企业提供移动接入解决方案。 Aruba Mobility Controllers的TACACS认证组件可能允许非授权的Web UI/SSH/Telnet访问，但TACACS不是默认的认证方式；Aruba Mobility Controllers可能提供一个基于Web的管理和captive portal接口，向这个web UI提供畸形输入可以导致向用户显示输入，导致跨站脚本攻击。 Aruba Networks Mobility Controllers 3.3.1.x Aruba Networks...

Attacking cisco router-bug warning-the black bar safety net

In you see Before you need to know: －what is IP address?－ What is ISP for?－ What is the TCP/IP data package?－ How to hide your IP address?－ How to use Telnet in?－ How to use HyperTerminal for?－ How to use Ping for?－ How to use TraceRoute it?－ How to use a proxy server?...

GoodTech Telnet Server Buffer Overflow

This module exploits a stack buffer overflow in GoodTech Systems Telnet Server versions prior to 5.0.7. By sending an overly long string, an attacker can overwrite the buffer and control program execution. This module requires Metasploit: https://metasploit.com/download Current source:...