USN-795-1: Nagios vulnerability

It was discovered that Nagios did not properly parse certain commands submitted using the WAP web interface. An authenticated user could exploit this flaw and execute arbitrary programs on the server...

AlmondSoft Classifieds Pro - 'gmap.php?addr' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

Nagios statuswml.cgi远程Shell命令注入漏洞

BUGTRAQ ID: 35464 Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios没有正确地过滤传送给statuswml.cgi的ping参数，远程攻击者可以通过tools - ping和tools- Traceroute WAP/WML页面注入并执行任意shell命令。例如，Ping主机名/地址173.45.235.65;echo $PATH会返回ping命令的输出并执行和返回echo $PATH命令的输出。 Nagios Nagios 3.1.0 Nagios Nagios 3.0.6 Nagios Nagios 2....

nagios -- Command Injection Vulnerability

Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise a vulnerable system. Input passed to the "ping" parameter in statuswml.cgi is not properly sanitised before being used to invoke the ping command. This can be exploite...

Nagios 3.0.6 - statuswml.cgi Arbitrary Shell Command Injection

Nagios 3.0.6 - statuswml.cgi Arbitrary Shell Command Injection source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute...

Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running th...

WinAsm Studio Buffer Overflow Vulnerability

This host is running WinAsm Studio and is prone to Heap Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodwinasmstudiowapbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ WinAsm Studio Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.co...

CVE-2009-0396

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

Design/Logic Flaw

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

CVE-2009-0396

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

CVE-2009-0396

CVE-2009-0396 affects multiple Sony Ericsson feature phones (W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, K530i). The vulnerability is triggered by a malformed WAP Push packet sent to (1) SMS or (2) UDP port 2948, allowing remote attackers to cause a denial of service (device reboot or...

Openwave WAP Gateway Any Default Password (deprecated)

Binary data 4885.prm...

SonyEricsson mobile phones WAP DoS

Crash on SMS or UDP/2948 WAP PUSH message handling...

Goole WAP Open Proxy Vulnerability

SVRT-08-08 Google Wap Proxy Vulnerability can be exploited by Hackers to attack Internet Users 1. General Information On 15 December 2008, SVRT-BKIS, from BKIS Center, has found a vulnerability in the Wap Proxy service of Google, which allows hackers to cheat Internet users. With this flaw, users...

Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net

| !/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the val...

DZ! sodb-2 0 0 8-1 3 EXP published-vulnerability warning-the black bar safety net

!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = ‘www.80vul.com’; // Server domain or IP $path = ‘/discuz/’; // Where the program path $key = 0; // The above variable is edited, make will the value...

Discuz!4.x wap\index.php 变量覆盖漏洞

Discuz!4.x一直存在着一个变量覆盖漏洞n年了.代码如下: $chs = ''; if$POST && $charset != 'utf-8' $chs = new Chinese'UTF-8', $charset; foreach$POST as $key = $value $$key = $chs-Convert$value; //foreach处理$POST导致变量覆盖 unset$chs;...

Discuz! Forum the wap function module coding injection vulnerability-vulnerability warning-the black bar safety net

Author: The Frozen prodigal son Due to the hair in a blog on the vulnerability information to a bit beef up. Official has out patch. Since PHP for multibyte character sets support the existence of problem in various coding conversion process, it is possible to initiate a program overflow and...

phpwind任意修改管理员密码漏洞

PHPWind 论坛系统 是一套采用 php+mysql 数据库 方式运行并可生成 html 页面的全新且完善的强大系统。因具有非凡的访问速度和卓越的负载能力而深受国内外朋友的喜爱。但是80sec在其中发现了一个安全漏洞，成功利用此漏洞可以直接修改管理员的密码进入后台，取得管理员权限。...

Discuz!论坛wap功能模块编码的注射漏洞

Discuz!论坛系统是一个采用 PHP 和 MySQL 等其他多种数据库构建的高效论坛解决方案。Discuz! 在代码质量，运行效率，负载能力，安全等级，功能可操控性和权限严密性等方面都在广大用户中有良好的口碑 由于 PHP 对 多字节字符集的支持存在问题，在各种编码相互转换过程中，有可能引发程序溢出和程序错误 提交一个 ' 转意成 ' 然后转成gbk的，\和'就变成两个字符了 '就可以成功的引入 Discuz!4.0.0 Discuz!4.1.0 Discuz!5.0.0 Discuz!5.5.0 Discuz!6.0.0 Discuz!6.1.0...