CVE-2006-0947

Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due...

CVE-2006-0947: Undefined Security Weakness

Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due...

Thomson SpeedTouch 500 Series - NewUser Function 31 Variable Persistent User Creation

source: https://www.securityfocus.com/bid/16839/info The SpeedTouch 500 series are prone to a cross-site scripting vulnerability. This issue is due to a failure in the devices to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...

Linux Add User

Create a new user with UID 0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework AddUser ------- Adds a UID 0 user to /etc/passwd. module MetasploitModule CachedSize = 97 include Msf::Payload::Single include...

Windows Execute net user /ADD

Create a new user and add them to local administration group. Note: The specified password is checked for common complexity requirements to prevent the target machine rejecting the user for failing to meet policy requirements. Complexity check: 8-14 chars 1 UPPER, 1 lower, 1 digit/special This...

Hosting Controller 0.6.1 - User Registration (2)

/ Hosting Controller include include include include include define PORT1 80 // port of web server define PORT2 8077 // port of hosting controller void infovo...

CVE-2004-1731

signuppage.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address...

Savant Web Server 3.1 Remote Buffer Overflow Exploit (win2003)

Exploit for unknown platform in category remote exploits ============================================================== Savant Web Server 3.1 Remote Buffer Overflow Exploit win2003 ============================================================== !/usr/bin/perl D:\Documents and...

openbsd/x86 add user w00w00 112 bytes

Exploit for openbsd/x86 platform in category shellcode ===================================== openbsd/x86 add user w00w00 112 bytes ===================================== include char shell= "\xeb\x2b\x5e\x31\xc0\x88\x46\x0b" "\x88\x46\x29\x50\xb0\x09\x50\x31" "\xc0\x56\x50\xb0\x05\xcd\x80\x89"...

PHP-Nuke 7.4 Remote Privilege Escalation

Exploit for unknown platform in category web applications ======================================== PHP-Nuke 7.4 Remote Privilege Escalation ======================================== A demonstration exploit HTTP form is provided: USERNAME: NOME: PASSWORD: E-MAIL: 0day.today 2018-01-05...

Enhance Seraph SSO support to create users automatically

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-4299. panel Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator...

Enhance Seraph SSO support to create users automatically

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-4299. panel Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator...

Enhance Seraph SSO support to create users automatically

Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator could create an OSUser account in JIRA if the SSO authentication succeeds...

CVE-2004-1731

signuppage.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address...

Linux User Account Activity Create User (via Splunk): audit (ADD_USER)

Binary data 710037.prm...

CVE-2004-0708

MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges...

CVE-2004-0708: Undefined Security Weakness

MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges...

Easy Chat Server 1.x - Multiple Denial of Service Vulnerabilities

Easy Chat Server 1.x - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/10649/info It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities. The chat software is implemented as a web server serving a chat web application...

E-Zone Media FuzeTalk 2.0 - AddUser.cfm Administrator Command Execution

E-Zone Media FuzeTalk 2.0 - AddUser.cfm Administrator Command Execution source: https://www.securityfocus.com/bid/10276/info It has been reported that FuseTalk is affected by an administrator command execution vulnerability in the adduser.cfm script. This issue is due to a failure of the...

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface...