173 matches found
CVE-2017-2689: Improper Authorization
Siemens RUGGEDCOM ROX I all versions allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings...
CVE-2017-6864: Improper Neutralization of Input During Web Page Generation
The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks...
PT-2017-15476
Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The issue allows an authenticated user to bypass access restrictions in the web interface at port 10000/TCP, potentially obtaining privileged file system access or changing configuration setting...
PT-2017-15474
Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The integrated web server at port 10000/TCP is prone to reflected Cross-Site Scripting attacks. This occurs when an unsuspecting user is induced to click on a malicious link. Recommendations For...
PT-2017-15473
Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The issue allows an authenticated user to read arbitrary files through the web interface at port 10000/TCP, potentially accessing sensitive information. Recommendations For all versions, restric...
CVE-2017-2686: Improper Authorization
Siemens RUGGEDCOM ROX I all versions contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information...
Siemens RUGGEDCOM ROX I Cross-Site Scripting Vulnerability
Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to conduct a cross-site...
Siemens RUGGEDCOM ROX I Elevation of Privilege Vulnerability
Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. An elevation of privilege vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to perform arbitrary...
Zookeeper 3.5.2 - Denial of Service Exploit
Exploit for linux platform in category dos / poc !/usr/bin/python Exploit Title: Zookeeper Client Denial Of Service Port 2181 Date: 2/7/2017 Exploit Author: Brandon Dennis Email: email protected Software Link: http://zookeeper.apache.org/releases.htmldownload Zookeeper Version: 3.5.2 Tested on:...
BitTorrent API Cross-Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent and uTorrent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. These applications expose a web service...
BitTorrent API Cross Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent and uTorrent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. These applications expose a web service...
Brasero - Crash (PoC)
Brasero - Crash PoC !/usr/bin/perl -w Title : Kali brasero - Crash Proof Of Concept website : https://www.kali.org/downloads/ Tested : kali 1.x Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es...
Authentication flaw
common.c in infosvr in ASUS WRT firmware 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via ...
CVE-2014-8515
The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...
Design/Logic Flaw
The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...
CVE-2014-8515
The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...
CVE-2014-8515: Improper Neutralization of Special Elements used in a Command
The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...
BitTorrent Web Interface Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the web interface boun...
BitTorrent Web Interface Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the web interface boun...