CVE-2009-4109

The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information...

CVE-2009-4109

Affected software: DotNetNuke 4.0 through 5.1.4. Vulnerability: The install wizard does not prevent anonymous users from accessing upgrade-determination functionality, allowing remote attackers to access version information and possibly other sensitive data. Root cause / mechanism: Information di...

CVE-2009-4109: Exposure of Sensitive Information to an Unauthorized Actor

The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information...

Wachovia Bank Cross Site Scripting

I found this a week ago and notified the CISO, and it still has not been fixed. It's a pretty simple cross site scripting vulnerabilty in the bank's retirement wizard page, it could allow theft of usernames, passwords, pins, SSN's, account numbers, etc. ---- Code Wachovia Online Banking Retiremen...

Hackers can invade Vientiane, the server of the method of analysis-vulnerability warning-the black bar safety net

Today, many Internet cafes have installed a Vientiane cafe management system, this system brings convenience is obvious. However, the more convenient the system The existence of security risks is greater, many hackers will come up with a hack of this management system approach, and some can even...

CVE-2008-7101

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information portal number by accessing the install wizard page via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information portal number by accessing the install wizard page via unknown vectors...

CVE-2008-7101

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information portal number by accessing the install wizard page via unknown vectors...

CVE-2008-7101: Undefined Security Weakness

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information portal number by accessing the install wizard page via unknown vectors...

phpMyAdmin - '/scripts/setup.php' PHP Code Injection

!/bin/bash CVE-2009-1151: phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE PoC v0.11 by pagvac gnucitizen.org, 4th June 2009. special thanks to Greg Ose labs.neohapsis.com for discovering such a cool vuln, and to str0ke milw0rm.com for testing this PoC script and providing feedback! PoC...

Memory corruption

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

CVE-2009-1555

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

CVE-2009-1555: Exposure of Sensitive Information to an Unauthorized Actor

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

CVE-2009-1517: Undefined Security Weakness

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service browser crash and possibly execute arbitrary code via unspecified input t...

PT-2009-4014 · Symantec · Symantec Norton Ghost

Name of the Vulnerable Software and Affected Versions: Symantec Norton Ghost version 14.0 Description: The issue concerns insecure methods in the Symantec.EasySetup.1 ActiveX control within the EasySetupInt.dll. This allows remote attackers to potentially cause a denial of service, leading to a...

Norton Ghost Support module for EasySetup wizard Remote DoS PoC

Exploit for unknown platform in category dos / poc =============================================================== Norton Ghost Support module for EasySetup wizard Remote DoS PoC ===============================================================...

MDVA-2008:016 : kdebase

On kdebase as released in Mandriva Linux 2008.0, Khelpcenter could not build an index for the KDE applications manuals, because a required package, htdig, is not in the main repositories. Htdig is now added as suggested package. Also, the Add a network wizard did not show up when browsing the...

Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================================== Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow PoC ===================================================================== /...

Mandriva Update for kdebase MDVA-2008:016 (kdebase)

Check for the Version of kdebase OpenVAS Vulnerability Test Mandriva Update for kdebase MDVA-2008:016 kdebase Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

eZip Buffer Overflow Vulnerability

The host is installed with eZip Wizard and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodezipbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ eZip Buffer Overflow Vulnerability. Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...