Wachovia Bank Cross Site Scripting

I found this a week ago and notified the CISO, and it still has not been fixed. It's a pretty simple cross site scripting vulnerabilty in the bank's retirement wizard page, it could allow theft of usernames, passwords, pins, SSN's, account numbers, etc. ---- Code Wachovia Online Banking Retiremen...

Hackers can invade Vientiane, the server of the method of analysis-vulnerability warning-the black bar safety net

Today, many Internet cafes have installed a Vientiane cafe management system, this system brings convenience is obvious. However, the more convenient the system The existence of security risks is greater, many hackers will come up with a hack of this management system approach, and some can even...

Design/Logic Flaw

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information portal number by accessing the install wizard page via unknown vectors...

CVE-2008-7101

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information portal number by accessing the install wizard page via unknown vectors...

CVE-2008-7101

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information portal number by accessing the install wizard page via unknown vectors...

phpMyAdmin - '/scripts/setup.php' PHP Code Injection

!/bin/bash CVE-2009-1151: phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE PoC v0.11 by pagvac gnucitizen.org, 4th June 2009. special thanks to Greg Ose labs.neohapsis.com for discovering such a cool vuln, and to str0ke milw0rm.com for testing this PoC script and providing feedback! PoC...

Memory corruption

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

CVE-2009-1555

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

PT-2009-4014 · Symantec · Symantec Norton Ghost

Name of the Vulnerable Software and Affected Versions: Symantec Norton Ghost version 14.0 Description: The issue concerns insecure methods in the Symantec.EasySetup.1 ActiveX control within the EasySetupInt.dll. This allows remote attackers to potentially cause a denial of service, leading to a...

Norton Ghost Support module for EasySetup wizard Remote DoS PoC

Exploit for unknown platform in category dos / poc =============================================================== Norton Ghost Support module for EasySetup wizard Remote DoS PoC ===============================================================...

MDVA-2008:016 : kdebase

On kdebase as released in Mandriva Linux 2008.0, Khelpcenter could not build an index for the KDE applications manuals, because a required package, htdig, is not in the main repositories. Htdig is now added as suggested package. Also, the Add a network wizard did not show up when browsing the...

Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================================== Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow PoC ===================================================================== /...

Mandriva Update for kdebase MDVA-2008:016 (kdebase)

Check for the Version of kdebase OpenVAS Vulnerability Test Mandriva Update for kdebase MDVA-2008:016 kdebase Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

eZip Wizard Detection (Windows SMB Login)

Detects the installed version of eZip Wizard on Windows. The script logs in via smb, searches for eZip32 in the registry and gets the version from the registry. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

eZip Buffer Overflow Vulnerability

The host is installed with eZip Wizard and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodezipbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ eZip Buffer Overflow Vulnerability. Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

CVE-2009-1028

Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file...

CVE-2009-1028

Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file...

CVE-2009-1028

CVE-2009-1028 describes a stack-based buffer overflow in ediSys eZip Wizard 3.0, allowing remote code execution via a crafted ZIP file. Public evidence includes Metasploit and Exploit-DB modules (eZip Wizard 3.0 Stack Buffer Overflow) and OpenVAS/NVD entries corroborating a remote code execution ...

eZip Wizard 3.0 Local Stack Buffer Overflow PoC (SEH)

No description provided by source. /ezip wizard Local Stack Buffer Overflow SEH POC SEH chain of main thread Address SE handler 0012FC60 58585858 0012FC60 41414141 AAAA Pointer to next SEH record Old bug ,still not fixed by vendors ,this kind of file can cause problems to a lot of soft of this...

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

/ezip wizard Local Stack Buffer Overflow SEH POC SEH chain of main thread Address SE handler 0012FC60 58585858 0012FC60 41414141 AAAA Pointer to next SEH record Old bug ,still not fixed by vendors ,this kind of file can cause problems to a lot of soft of this kind. Ex: ZipGenius stack buffer...