CVE-2013-3018

The CVE-2013-3018 issue affects IBM Tivoli Application Dependency Discovery Manager (TADDM) where the AXIS webapp under deploy-tomcat/axis exposes TADDM configuration information without authentication (happyaxis.jsp) in TADDM versions 7.1.2 and 7.2.0–7.2.1.4. A remediation is available: upgrade ...

CVE-2013-3023

IBM TADDM (Tivoli Application Dependency Discovery Manager) versions 7.1.2 and 7.2.0 up to 7.2.1.4 are affected by CVE-2013-3023, which could allow remote attackers to obtain Tomcat credentials by sniffing HTTP sessions. The IBM Security Bulletin confirms the vulnerability in the Tomcat interface...

CVE-2013-3071

creationtimestamp| type| source ---|---|--- 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0...

CVE-2013-3307

creationtimestamp| type| source ---|---|--- 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2025-01-23 18:41:16+00:00| exploited| https://t.me/truesecator/6651 2025-03-03 10:15:44+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2025-03-04 04:19:35+00:00| seen|...

CVE-2013-5211

creationtimestamp| type| source ---|---|--- 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/portmap/portmapamp.rb 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-0144

creationtimestamp| type| source ---|---|--- 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0...

Netgear WNDR4700 Router Authentication Bypass (CVE-2013-3071)

An authentication bypass vulnerability exists in Netgear WNDR4700 routers. This allows remote attackers to perform administrative actions without authentication...

Schneider Electric PLCs - Cross-Site Request Forgery Vulnerability

Exploit for windows platform in category web applications Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC: 140NOE77111,...

Schneider Electric PLCs - Cross-Site Request Forgery

Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Date: 2018-05-12 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC: 140NOE77111, 140NOE77101, 140NWM10000 Modicon M340 PLC...

Schneider Electric PLCs Cross Site Request Forgery

Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Date: 2018-05-12 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC: 140NOE77111, 140NOE77101, 140NWM10000 Modicon M340 PLC...

Schneider Electric PLCs - Cross-Site Request Forgery

Schneider Electric PLCs - Cross-Site Request Forgery Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Date: 2018-05-12 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC:...

Information disclosure

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2018-11553)

Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Server 2010 SP2 are both Microsoft enterprise business collaboration platforms for consolidating business information and enabling you to share work, collaborate with others, organize projects and workgroups, and search for people and...

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Enterprise Server 2016 and SharePoint Foundation 2013 SP1 are both products of Microsoft Corporation USA.Microsoft SharePoint Enterprise Server 2016 is Microsoft SharePoint Enterprise Server 2016 is an enterprise business collaboration platform. The platform is used to...

Medium: ntp

Issue Overview: The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests, as exploited in the wild in December 2013. CVE-2013-5211 A malicious authenticated...

Microsoft InfoPath Remote Code Execution Vulnerability

Microsoft InfoPath 2013 SP1 is a set of tools for collecting information and creating forms based on XML technology from Microsoft USA. The tool supports the design and completion of electronic forms, collection, management and sharing of business processes, as well as from external database...

Microsoft Infopath 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB3162075)

This host is missing an important security update according to Microsoft KB3162075 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Update for Microsoft Word 2013 (KB4018396) 64-Bit Edition

A security vulnerability exists in Microsoft Word 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Foundation 2013 (KB4018398) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4018388) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...