1000 matches found
Lenovo 500 Wireless Keyboard or Mouse Keystroke Injection
Lenovo Security Advisory: LEN-4292 Potential Impact: Potential unwanted data input Severity: Low Summary: An unauthorized attacker may be able to enter keyboard inputs through the Lenovo 500 Wireless keyboard or mouse dongle. Description: A vulnerability was identified where an attacker with...
Mail.ru: [opensource.mail.ru] system accounts enumeration
Добрый день. Нашел интересную вещь. Надеюсь уязвимость на самом деле существует, и я не параноик. Если аккаунт существует cat /etc/passwd | grep %accountname% то приложение редиректит 302 на /create/%accountname%/home или возвращает 200 как в случай nobody. https://opensource.mail.ru/nobody/...
The vulnerability of the D-Link DSR-500 router’s microprogramming software allows a malicious individual to gain administrator privileges.
The D-Link DSR-500 router has a pre-installed user with administrator privileges...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to intercept network traffic.
The D-Link DSR-500 router’s microprogramming software does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to execute arbitrary system commands.
The web interface of the router allows for the execution of a limited number of system commands ping, traceroute, dnslookup. However, it is possible to execute any command that is separated by a system separator from the allowed commands...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain administrator privileges.
The script “/scgi-bin/platform.cgi” of the D–Link DSR–500 router’s software does not properly filter the data entered by the user in the “Password” field. As a result, a malicious individual can bypass the authentication process and gain access to the device with administrator privileges...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain access to user account information.
In the file system of the D–Link DSR–500 router, user passwords are stored publicly in the file /tmp/teamf1.cfg.ascii...
dmagazine.com XSS vulnerability
Vulnerable URL: http://www.dmagazine.com/Errors/500.asp?aspxerrorpath=" Details: Description| Value ---|--- Patched:| Yes, at 15.07.2016 Latest check for patch:| 15.07.2016 23:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 45120 VIP website status:| Yes Chec...
Non-ISAKMP Traffic Over Port 500/UDP
Binary data 7212.pasl...
New Relic: JIRA account misconfig causes internal info leak
This issue was originally reported via email [email protected] Hello, In preparation for security conference I'm doing a research of popular task tracking systems / project management software and how they affect company's IT security. During investigation I've found several critical...
Rummy 500 - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Rummy 500 published at the 'play' market has multiple vulnerabilities...
CVE-2016-1334
Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...
Cisco Small Business 500 Series Wireless Access Point Configuration Modification Vulnerability
A vulnerability in the web interface that is used to update the system time on Cisco Small Business 500 Series Wireless Access Point devices could allow an unauthenticated, remote attacker to impact the integrity of a system. The vulnerability is due to insufficient validation of user-controlled...
Cisco Small Business 500 Device Web GUI Denial of Service Vulnerability
The Cisco Small Business 500 Device is a 500 series stackable managed switch product from Cisco. A security vulnerability in the Web GUI of the Cisco Small Business 500 Device allows a remote attacker to perform a denial of service by sending a specially crafted HTTP request...
CVE-2016-1303
The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...
CVE-2016-1303
The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...
Design/Logic Flaw
The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...
CVE-2016-1303
The CVE-2016-1303 entry concerns the Cisco Small Business 500 Series devices, where the web GUI on version 1.2.0.92 can be remotely abused to cause a denial of service by sending a crafted HTTP request (Bug ID CSCul65330). Affected products are Cisco Small Business 500 devices with a web-based GU...
Denial of Service
Overview Versions of hapi prior to 11.1.3 are affected by a denial of service vulnerability. The vulnerability is triggered when certain input is passed into the If-Modified-Since or Last-Modified headers. This causes an 'illegal access' exception to be raised, and instead of sending a HTTP 500...
tools.cisco.com Cross Site Scripting
Exploit Title: Cisco.com sub-domain Reflected XSS RXSS Date: 31/10/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.cisco.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: cisco.com sub-domains Cisco description :...