1598 matches found
Cisco NX-OS Software-Based Products Authentication, Authorization, and Accounting Bypass Vulnerability (cisco-sa-20161005-nxaaa)
A vulnerability in the SSH subsystem of the Cisco Nexus family of products could allow an authenticated, remote attacker to bypass authentication, authorization, and accounting AAA restrictions. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...
Cisco NX-OS Software-Based Products Authentication, Authorization, and Accounting Bypass Vulnerability
A vulnerability in the SSH subsystem of the Cisco Nexus family of products could allow an authenticated, remote attacker to bypass authentication, authorization, and accounting AAA restrictions. The vulnerability is due to the improper processing of certain parameters that are passed to an affect...
Cisco Releases Security Updates
Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...
CVE-2016-6669
Buffer overflow in the Authentication, Authorization and Accounting AAA module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet...
Buffer overflow
Buffer overflow in the Authentication, Authorization and Accounting AAA module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet...
[SECURITY] Fedora 24 Update: pulp-2.8.6-1.fc24
Pulp provides replication, access, and accounting for software repositories...
Security Advisory - Buffer Overflow Vulnerability in Huawei USG Products
The Authentication, Authorization and Accounting AAA module in the USG products has a buffer overflow vulnerability. A remote attacker can send crafted Enterprise Application Platform EAP packets to the USG products through a Remote Authentication Dial In User Service RADIUS server which has...
Xero Accounting Software - Exported components, External URLs, KeyStore usage vulnerabilities
HackApp vulnerability scanner discovered that application Xero Accounting Software published at the 'play' market has multiple vulnerabilities...
DMA Radius Manager 4.1.5 Cross Site Request Forgery
tanks: Dr Ms Jk - n1arash - Milad Hacking - malahsky...
Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory
mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...
Post Exploitation Powershell Tool: mimikittenz
Post Exploitation Powershell Tool mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes usi...
Car costs accounting - Customized SSL, External URLs, KeyStore usage vulnerabilities
HackApp vulnerability scanner discovered that application Car costs accounting published at the 'play' market has multiple vulnerabilities...
Arbitrary File Upload Vulnerability in Cost Accounting Practical Training Teaching Platform of Xiamen NetZhong.com Software Co.
Cost accounting practical training teaching platform of Xiamen NetZone Software Co. There is a file upload vulnerability in the cost accounting training platform that can be exploited by an attacker to upload arbitrary files and gain control of the site...
[SECURITY] Fedora 24 Update: pulp-2.8.3-1.fc24
Pulp provides replication, access, and accounting for software repositories...
USN-2947-2 linux-lts-wily vulnerabilities
Ralf Spenneberg discovered that the usbvision driver in the Linux kernel did not properly validate the interfaces and endpoints reported by the device. An attacker with physical access could cause a denial of service system crash. CVE-2015-7833 Venkatesh Pottem discovered a use-after-free...
Small Business Accounting PRO - Apache license, BSD license, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application Small Business Accounting PRO published at the 'play' market has multiple vulnerabilities...
kernel security, bug fix, and enhancement update
2.6.32-573.22.1 - mm always decrement anonvma degree when the vma list is empty Jerome Marchand 1318364 1309898 2.6.32-573.21.1 - fs pipe: fix offset and len mismatch on pipeiovcopytouser failure Seth Jennings 1310148 1302223 CVE-2016-0774 - fs gfs2: Add missing else in transaddmeta/data Robert S...
ventureline.com XSS vulnerability
Vulnerable URL: https://www.ventureline.com/accounting-glossary/?livesearchinput==Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 810081 Google Pagerank| 4 VIP website status...
VMware ESX / ESXi Descheduled Time Accounting DoS (VMSA-2009-0007) (remote check)
The remote ESX / ESXi host is missing a security-related patch. It is, therefore, affected by an unspecified flaw in the Descheduled Time Accounting driver that allows a guest Windows user to cause a denial of service. Note that this issue can be exploited only if the feature is installed and the...
Huawei Switches Permission Control Privilege Escalation (HWPSIRT-2015-08048)
The remote Huawei switch is affected by a privilege escalation vulnerability related to improper interaction of user permissions when Authentication, Authorization, and Accounting AAA are enabled for permission control on the switch. An authenticated, remote attacker can exploit this to access th...