Cisco Small Business 220 Series Smart Plus Switches Cross-Site Request Forgery Vulnerability

Cisco Small Business 220 Series Smart Plus Switches is a 220 Series stackable managed switch product from Cisco USA. A cross-site request forgery vulnerability exists in Cisco Small Business 220 Series Smart Plus Switches. An attacker could exploit this vulnerability to perform unauthorized...

CVE-2016-1472

The CVE-2016-1472 issue affects Cisco Small Business 220 Series Smart Plus Switches (Sx220) with firmware prior to 1.0.1.1. The vulnerability resides in the web-based management interface where insufficient validation of HTTP requests allows an unauthenticated, remote attacker to cause the web UI...

Cisco Small Business 220 Series Smart Plus Switches Unauthorized Access Vulnerability

Cisco Small Business 220 Series Smart Plus Switches is a 220 Series stackable managed switch product from Cisco USA. An unauthorized access vulnerability exists in Cisco Small Business 220 Series Smart Plus Switches. An attacker could exploit this vulnerability to gain unauthorized access to an...

Cisco Small Business 220 Series Smart Plus Switches Denial of Service Vulnerability

Cisco Small Business 220 Series Smart Plus Switches is a 220 Series stackable managed switch product from Cisco USA. A denial of service vulnerability exists in Cisco Small Business 220 Series Smart Plus Switches. An attacker could exploit this vulnerability to cause a denial of service...

Cisco Small Business 220 Series Smart Plus Switches Cross-Site Scripting Vulnerability

The Cisco Small Business 220 Series Smart Plus Switches are smart switches. Cisco Small Business 220 Series Smart Plus Switches cross-site scripting vulnerability that fails to properly validate user-submitted inputs allows an attacker to exploit the vulnerability to execute arbitrary code in the...

Cisco Small Business 220 Series Smart Plus Switches Web Interface Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Sx220 Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to...

Cisco Small Business 220 Series Smart Plus Switches Web Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Sx220 Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

PCMAN FTP Server Buffer Overflow - PUT Command

This module exploits a buffer overflow vulnerability found in the PUT command of the PCMAN FTP v2.0.7 Server. This requires authentication but by default anonymous credentials are enabled. This module requires Metasploit: https://metasploit.com/download Current source:...

Amazon Linux: Security Advisory (ALAS-2013-220)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

220-volt.ru XSS vulnerability

Open Bug Bounty ID: OBB-71899 Description| Value ---|--- Affected Website:| 220-volt.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Debian DLA-220-1 : dpkg security update

Jann Horn discovered that the source package integrity verification in dpkg-source can be bypassed via a specially crafted Debian source control file .dsc. Note that this flaw only affects extraction of local Debian source packages via dpkg-source but not the installation of packages from the...

RhinoSoft Serv-U FTP Server 7.2.0.1 'rnto' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31563/info RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrar...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts via a crafted request to admin/accesscontroluseradd.php; 2...

CVE-2013-6922

CVE-2013-6922 concerns Seagate BlackArmor NAS sg2000-2000.1331. Multiple CSRF vulnerabilities allow an attacker to hijack administrator authentication and perform dangerous actions via crafted requests to admin/access_control_user_add.php and related endpoints. Affected device: BlackArmor NAS sg2...

CVE-2013-6923

The CVE-2013-6923 issue affects Seagate BlackArmor NAS sg2000-2000 with firmware sg2000-2000.1331. It describes two persistent XSS risks: (1) fullname input in admin/access_control_user_edit.php and (2) workname input in admin/network_workgroup_domain.php. The root cause is failure to sanitize us...

MS13-069: Cumulative Security Update for Internet Explorer (2870699)

The remote host is missing Internet Explorer IE Security Update 2870699. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6982...

В США задержаны 11 хакеров из России

Они входили в преступную группу, похитившую из американских банков 3 млн долларов Дмитрий ГОНЧАРУК, Никита КРАСНИКОВ — 05.10.2010 Еще шесть граждан России были задержаны в США по обвинению в причастности к команде мошенников, которая воровала деньги с банковских счетов. Гражданство других девяти...

Mandriva Update for davfs MDVSA-2009:220-1 (davfs)

Check for the Version of davfs OpenVAS Vulnerability Test Mandriva Update for davfs MDVSA-2009:220-1 davfs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Buffer overflow

Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service application crash or execute arbitrary code via a long 220 reply aka connection greeting or welcome message...

Mandrake Security Advisory MDVSA-2009:220 (davfs)

The remote host is missing an update to davfs announced via advisory MDVSA-2009:220. OpenVAS Vulnerability Test $Id: mdksa2009220.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:220 davfs Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...