CVE-2016-6373

Cisco Cloud Services Platform (CSP) 2100 web GUI vulnerability (CVE-2016-6373) affects CSP2100 2100 series running 2.0 and 2.x prior to 2.1.0. An authenticated remote attacker can inject commands via crafted platform requests to execute arbitrary OS commands with root privileges. The issue stems ...

CVE-2016-6374

CVE-2016-6374 affects Cisco Cloud Services Platform (CSP) 2100, specifically 2.x prior to 2.1.0, where an unauthenticated, remote attacker can exploit a web GUI input sanitization flaw to execute arbitrary code via a crafted dnslookup HTTP request. Root cause: improper sanitization of user-suppli...

CVE-2016-6374

Cisco Cloud Services Platform CSP 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093...

CVE-2016-6373

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

Cisco Cloud Services Platform 2100 Remote Command Execution Vulnerability

A vulnerability in the web interface of Cisco Cloud Services Platform CSP 2100 could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient sanitization of specific values received as part of a user-supplied HTTP request...

CVE-2016-2100

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the 1 editbookmarks or 2 destroybookmarks permission...

CVE-2016-2100

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 is vulnerable to an access control flaw: remote authenticated users with edit_bookmarks or destroy_bookmarks permissions can read, modify, or delete private bookmarks. The root cause is improper authorization on bookmark objects. No fix version i...

GTA Firewall GB-OS 6.2.02 Script Insertion

Document Title: =============== GTA Firewall GB-OS v6.2.02 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1713 Release Date: ============= 2016-02-24 Vulnerability Laboratory ID VL-ID:...

Oracle: Security Advisory (ELSA-2012-1580)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-2048)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-1445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

(0Day) Agilent Technologies 2100 Expert CSDispatcher.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Agilent Technologies 2100 Expert. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CSDispatcher.exe process, which listens on port 3434. By sending ...

Gentoo Security Advisory GLSA 201507-16

Gentoo Linux Local Security Checks GLSA 201507-16 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

WebGate WESPSDK WESPDiscovery Stack Buffer Overflow (CVE-2015-2100)

A code execution vulnerability exists in WebGate WESPSDK that is shipped with multiple WebGate products. The vulnerability is due to a stack buffer overflow in the TCPDiscovery and TCPDiscovery2 methods of the WESPDiscovery.WESPDiscoveryCtrl ActiveX control. A remote attacker could exploit this...

Joomla Component com_projectfork Local File Inclusion (CVE-2009-2100)

A file inclusion vulnerability has been reported in Joomlapraise Com Projectfork. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

CVE-2013-2100

The CVE-2013-2100 issue affects Gentoo Portage (version 2.1.12) where the urlopen helper does not verify X.509 SSL certificates when using HTTPS. This allows a remote attacker to perform a man-in-the-middle attack to spoof the Gentoo repository and modify binary package lists via a crafted certif...

Harris Stratex StarMAX 2100 WIMAX Subscriber Station Running Config CSRF Exploit

No description provided by source. I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station.Using this code i am able to view the current configuration of the subscriber station without authentication from both LAN & WAN Software Link:http://securityvulns.com/Wdocument736.html...

Microsoft RPC DCOM Interface Overflow

No description provided by source. $Id: ms03026dcom.rb 11545 2011-01-11 17:56:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

BlueSocket BSC 2100 5.0/5.1 Admin.PL Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21419/info BlueSocket BSC 2100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...

Ubuntu: Security Advisory (USN-2100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...