what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Daniel Clemens

Zeacom Chat Server JSESSIONID Weak SessionID

Posted May 18, 2011

Authored by Daniel Clemens | Site packetninjas.net

Usage of weak session management exists within the Zeacom web-chat application versions 5.0 SP4 and below. It enables the bruteforcing of the sessionid which can enable the hijacking of anothers chat session.

tags | advisory, web

advisories | CVE-2010-0217

SHA-256 | 348be816b349ef4e1d9255d24ad8d31f6811c52da8b4a6a86359fe211a3ff443

Download | Favorite | View

MediaCast 8 Credential Disclosure

Posted Apr 25, 2011

Authored by Daniel Clemens

MediaCast versions 8 and below suffer from a vulnerability that allows for the disclosure of previously cached Active Directory credentials.

tags | exploit

SHA-256 | c88fa381d0da7f60a5a8607c0a502f70e3ca22558705e751c96e78bcd92f858a

Download | Favorite | View

Cisco ASA/PIX TCP Fragments

Posted Apr 11, 2009

Authored by Daniel Clemens

Cisco ASA/PIX appliances fail to properly check fragmented TCP packets.

tags | exploit, tcp

systems | cisco

SHA-256 | cf31e2d808f52215c9aa9a83ebaf0678772e6f5065c0f50988aaf86c9f3745b9

Download | Favorite | View