CVE-2015-0515

Unrestricted file upload vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file...

CVE-2015-0513

Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified field...

CVE-2015-0514

EMC M&R (Watch4net) before 6.5u1 and ViPR SRM before 3.6.1 store remote-server credentials in Watch4net encrypted with a fixed hardcoded password, which makes the credentials decryptible if an attacker obtains the encrypted copy. Affected products include EMC M&R (Watch4Net) < 6.5u1 and EMC Vi...

CVE-2015-0515

CVE-2015-0515 affects EMC M&R (Watch4Net) before 6.5u1 and EMC ViPR SRM before 3.6.1. An unauthenticated? No: authenticated, privileged user can upload an arbitrary file via the web interface and access that file to execute code on the affected system. The issue is part of a set of Watch4Net/ViPR...

CVE-2015-0513

CVE-2015-0513 describes Cross-Site Scripting in EMC M&R (Watch4Net) Centralized Management Console and related UI components. Affected products are EMC M&R (Watch4Net) up to version 6.5u1 and EMC ViPR SRM up to version 3.6.1. The root cause is reflected/stored XSS in administrative UI elements (C...

CVE-2015-0516

Directory traversal vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2015-0516

EMC M&R (Watch4Net) path traversal vulnerability CVE-2015-0516 affects EMC M&R/Watch4Net prior to 6.5u1 and EMC ViPR SRM prior to 3.6.1. An authenticated user can manipulate URLs to read arbitrary files on the system via the MIB Browser/Device Discovery interfaces. Root cause is a directory trave...

CVE-2015-0515: Undefined Security Weakness

Unrestricted file upload vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file...

PT-2015-4679

Name of the Vulnerable Software and Affected Versions EMC M&R aka Watch4Net versions prior to 6.5u1 ViPR SRM versions prior to 3.6.1 Description The issue allows remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack...

PT-2015-4678

Name of the Vulnerable Software and Affected Versions EMC M&R aka Watch4Net versions prior to 6.5u1 ViPR SRM versions prior to 3.6.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative user interface. These vulnerabilities allow remote...

PT-2015-4680

Name of the Vulnerable Software and Affected Versions EMC M&R aka Watch4Net versions prior to 6.5u1 ViPR SRM versions prior to 3.6.1 Description The issue allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file due to an unrestricted file...

CVE-2015-0513: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified field...

CVE-2015-0516: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL...

PT-2015-4681

Name of the Vulnerable Software and Affected Versions EMC M&R aka Watch4Net versions prior to 6.5u1 ViPR SRM versions prior to 3.6.1 Description The issue allows remote authenticated users to read arbitrary files via a crafted URL, specifically due to a directory traversal vulnerability...

CVE-2015-0514: Exposure of Sensitive Information to an Unauthorized Actor

EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack...

Release Notes for Veeam Backup & Replication 8.0 Patch 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 1 Cause Please confirm you are running version 8.0.0.807, 8.0.0.817 or 8.0.0.831 prior to installing...

ProjectSend r-561 - Arbitrary File Upload Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: ProjectSend r-651 File Upload Date: December 01, 2014 Exploit Author: Fady Mohamed Osman Exploit-db id:2986 Vendor Homepage: http://www.projectsend.org/ Software Link: http://www.projectsend.org/download/67/...

PWG R&om <= 1.11 - CSRF & XSS

The pwgrandom WordPress plugin was affected by a CSRF & XSS security vulnerability...

Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation

Challenge Inventory job or any tape jobs may fail with an error "Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation" You may find following entries in the Job..TapeVmBackup.log / Job..TapeFilesBackup or Job.Tapelibraryinventory.TapeInventory:...

PHP Stock Management System 1.02 - Multiple Persistent Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications ​ Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities in PHP Stock Management System 1.02 Date: 25 Aug 2014 Exploit Author: ​Ragha Deepthi K R Vendor Homepage: ​http://www.posnic.com/​ Software Link:​...