139 matches found
CVE-2017-2688
The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a...
CVE-2017-2686
Siemens RUGGEDCOM ROX I (all versions) contains CVE-2017-2686: an authenticated user could read arbitrary files via the web interface on port 10000/TCP, exposing sensitive information. Root cause is improper authorization on the web interface (CWE-285); impact is partial confidentiality (I:H in C...
CVE-2017-2687
Siemens RUGGEDCOM ROX I all versions contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link...
CVE-2017-2687
CVE-2017-2687 affects Siemens RUGGEDCOM ROX I devices (all versions) via the integrated web server on port 10000/TCP. The vulnerability is a reflected Cross-Site Scripting (XSS) issue in the web interface, exploitable when a user is induced to click a malicious link. The ICS-CERT advisory notes n...
CVE-2017-2686
Siemens RUGGEDCOM ROX I all versions contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information...
CVE-2017-6864
CVE-2017-6864 affects Siemens RUGGEDCOM ROX I devices (all versions) via the integrated web server on port 10000/TCP. An authenticated user can perform stored Cross-Site Scripting attacks against the web interface. The CVE is documented in multiple sources (NVD entry and related advisories). The ...
Siemens RUGGEDCOM ROX I Cross-Site Scripting Vulnerability
Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to conduct a cross-site...
Siemens RUGGEDCOM ROX I Elevation of Privilege Vulnerability
Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. An elevation of privilege vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to perform arbitrary...
Zookeeper 3.5.2 - Denial of Service Exploit
Exploit for linux platform in category dos / poc !/usr/bin/python Exploit Title: Zookeeper Client Denial Of Service Port 2181 Date: 2/7/2017 Exploit Author: Brandon Dennis Email: email protected Software Link: http://zookeeper.apache.org/releases.htmldownload Zookeeper Version: 3.5.2 Tested on:...
BitTorrent API Cross-Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent and uTorrent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. These applications expose a web service...
BitTorrent API Cross Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent and uTorrent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. These applications expose a web service...
Brasero - Crash (PoC)
Brasero - Crash PoC !/usr/bin/perl -w Title : Kali brasero - Crash Proof Of Concept website : https://www.kali.org/downloads/ Tested : kali 1.x Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es...
Authentication flaw
common.c in infosvr in ASUS WRT firmware 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via ...
CVE-2014-8515
The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...
Design/Logic Flaw
The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...
CVE-2014-8515
The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...
BitTorrent Web Interface Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the web interface boun...
BitTorrent Web Interface Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorent. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the web interface boun...
Design/Logic Flaw
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000...