4420 matches found
CVE-2011-0946
CVE-2011-0946 involves a vulnerability in Cisco IOS/NAT where NAT for NetMeeting Directory (LDAP) can be triggered by malformed LDAP traffic, causing a DoS (device reload or hang). Affected are Cisco IOS releases 12.1–12.4 and 15.0–15.1, plus IOS XE 3.1.xSG. The weakness is within the NAT transla...
CVE-2011-3272
CVE-2011-3272 concerns Cisco IOS/IP SLA. Affected: Cisco IOS 15.1 and IOS XE 2.1.x–3.3.x where IP SLA processing can be triggered by malformed IP SLA UDP packets. Root cause: memory corruption leading to device reload (DoS) when IP SLA control/operations receive crafted traffic (Bug CSCtk67073). ...
CVE-2011-3277
CVE-2011-3277 affects Cisco IOS NAT implementation (12.1–12.4, 15.0–15.1) and IOS-XE 3.1.xSG. The issue arises from NAT handling of H.323 traffic on TCP/1720, enabling remote attackers to cause a DoS (device reload). Cisco’s advisory notes multiple NAT DoS vectors (including H.323), with mitigati...
DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable
DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable DarkComet-RAT v4.0 Change log - DarkComet-RAT is now compiled on Delphi XE instead of Delphi 2010. - Synthax highlighter added in remote keylogger. - Multithreading is now more efficient, no more freezing, using a new powerfull and stable...
Embarcadero Delphi XE (2011) DLL preloading exploit
Exploit for windows platform in category local exploits =================================================== Embarcadero Delphi XE 2011 DLL preloading exploit =================================================== Exploit Title : Embarcadero Delphi XE 2011, DLL preloading exploit Author : STRELiTZIA...
CVE-2010-2834
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...
Design/Logic Flaw
The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, allows remote attackers to cause a denial of service device reload via a malformed IGMP packet, aka Bug ID CSCte14603...
CVE-2010-2830
CVE-2010-2830 covers a DoS vulnerability in Cisco IOS/IOS-XE where a malformed IGMPv3 packet, with PIM enabled, can cause the device to reload. Affected software includes Cisco IOS 12.2, 12.3, 12.4, 15.0 and IOS-XE 2.5.x before 2.5.2. The root cause is a malformed IGMP packet processed when IGMPv...
Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability
A device running Cisco IOS® Software, Cisco IOS XE Software, or Cisco IOS XR Software is vulnerable to a remote denial of service DoS condition if it is configured for Multiprotocol Label Switching MPLS and has support for Label Distribution Protocol LDP. A crafted LDP UDP packet can cause an...
Absolute Image Gallery XE (Default password Vulnerability)
Exploit for php platform in category web applications =========================================================== Absolute Image Gallery XE Default password Vulnerability =========================================================== Title : Absolute Image Gallery XE Default password Vulnerability...
Absolute Image Gallery XE Default Password
Title : Absolute Image Gallery XE Default password Vulnerability Author : EN|GMA7 By : SuliMan Tested on : windows vista Homepage : www.enigma7.net Contact : [email protected] Thanks to : Zaid - Mohammad - Hussain Software Link :...
Code injection
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...
Memory corruption
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...
Code injection
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1 through 12.233SXI2, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows...
CVE-2009-1168
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...
CVE-2009-2049
Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1 through 12.233SXI2, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows...
CVE-2008-6859
Consolidated data from connected documents confirms CVE-2008-6859 affects Xigla Software Absolute Control Panel XE 1.5. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value. Exploitation is feasible over network wit...
Authentication flaw
Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."...