Security Bypass Vulnerability in Multiple D-Link DGS-1510 Websmart Devices

The D-Link DGS-1510-28XMP is an Ethernet switch from AUO D-Link. A full bypass vulnerability exists in multiple D-Link DGS-1510 Websmart devices, which can be exploited by remote attackers to submit a special request for unauthorized command execution...

McAfee VirusScan Enterprise Cross-Site Request Forgery Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A cross-site request forgery vulnerability exists in VirusScan...

Cisco EPC 3928 - Multiple Vulnerabilities

Cisco EPC 3928 - Multiple Vulnerabilities Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 / CVE-2016-1337...

Cisco EPC 3928 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 /...

Cisco Prime Network Services Controller Unauthorized Local Command Execution (cisco-sa-20151217-pnsc)(deprecated)

Nessus has dropped device detection of the now EOL Cisco Prime Network Services Controller. This plugin is being deprecated as a result. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/07/05. Deprecated along with dropping SSH library support. include"compat.inc"; if description...

Cisco Wireless Residential Unauthorized Command Vulnerability

A vulnerability with web interface access authentication of the Cisco EPC3928 Wireless Residential Gateway could allow an unauthenticated, remote attacker to issue a subset of commands as the administrator without authenticating to the device. The vulnerability is due to lack of authentication...

GREED 0.81 GRX File List Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands in file names...

Windowmaker wmmon 1.0 b2 Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/885/info WMMon is a multiple platform Window Maker docking application. It monitors useful system information such as CPU load and disk activity. The application also allows the user to define commands that can be launche...

Symantec Web Gateway Security Issues

SUMMARY Symantec Web Gateway SWG 5.2 Appliance management console is susceptible to security issues. Successful exploitation could result in unauthorized command execution on or access to the management console. There is also potential for unauthorized backend database manipulation. AFFECTED...

Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution

Exploit for hardware platform in category web applications The file getAlias.php located in /backupmgt has the following lines: $ipAddress = $GET"ip"; if $ipAddress != "" exec"grep -I $ipAddress $immedLogFile aliasHistory.txt"; .. .. The GET parameter can easily be manipulated to execute commands...

Debian DSA-2478-1 : sudo - parsing error

It was discovered that sudo misparsed network masks used in Host and HostList stanzas. This allowed the execution of commands on hosts, where the user would not be allowed to run the specified command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 2478-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2478-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2012 http://www.debian.org/security/faq -...

HP-UX Update for JRE HPSBUX00141

Check for the Version of JRE OpenVAS Vulnerability Test HP-UX Update for JRE HPSBUX00141 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

GREED 0.81 - .GRX File List Command Execution

GREED 0.81 - .GRX File List Command Execution source: https://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands i...

[Full-Disclosure] Vulnerability in CCBill script

Recently there are many hacking attempts attacking E-commerce site that use CCBILL to precess credit cards. Some of my clients sites are hacked and defaced by this vulnerability. In the Incidents List, some people already mention about it. I just take a look at the actual problem and figure out...

XMMS Remote input validation error

Overview There is an input validation error in the stand-alone SOAP server XMMS Remote which allows unauthorized remote command execution. Description XMMS Remote is a stand-alone XML/SOAP HTTP server implemented in PERL created by X2 Studios. It is used to monitor a running xmms media player...

Working Resources 1.7.x2.15 BadBlue - ext.dll Command Execution

Working Resources 1.7.x2.15 BadBlue - ext.dll Command Execution source: https://www.securityfocus.com/bid/7387/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access. This is due to an input validation issue in the 'ext.dll' component that could all...

man-cgi.txt

Upon researching several possible cgi based man holes I ran across the following bugged code © 1994-1999 Man-cgi 2.00, Panagiotis Christias © 1995 Man-cgi 1.15 Modified for Solaris 2.3, David Adams, © 1994 Man-cgi 1.15, Panagiotis Christias © 1996 Man-cgi 1.15 Ported to linux and maintained by, T...

Security Bulletin #00201

Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00201 Date: February 21, 2001 Cross-Ref: Title: Java Runtime Environment unauthorized command execution The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to...

pop2d.fold.txt

While working to port ipop2d exploit to java discovered another hole in the FOLD command of ipop2d... The ability to read files that are readable via the pop2d userid. Attached is a ported exploit in java for bnc... as well as the pop2d exploit transcript. -d0tslash b10z EFnet 9x EFnet...