7778 matches found
Advantech WebAccess Web Administration Interface Detection
Binary data scadaadvantechwebaccessdetect.nbin...
CVE-2014-0331
Cross-site scripting XSS vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to guipartA/...
Cross site scripting
Cross-site scripting XSS vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to guipartA/...
CVE-2014-0331
Fortinet FortiADC D-series (3.2.0, possibly earlier) contains a cross-site scripting (XSS) vulnerability in the web interface. The issue stems from the locale parameter in /FortiADC/gui_partA/ failing to neutralize input, allowing a remote attacker to inject script/HTML in the victim’s browser co...
Design/Logic Flaw
WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php...
A10 Networks ACOS 2.7.0-P2(build: 53) - Buffer Overflow
Exploit for hardware platform in category dos / poc === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially...
ASUS RT-AC68U Cross Site Scripting
=====Alligator Security Team - Security Advisory============================ Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface Author: Joaquim Brasil de Oliveira =====Table of Contents====================================================== 1. Overview 2. Detailed...
HP Managed printing Administration jobAcct Remote Command Execution - Ver2 (CVE-2011-4166)
A command execution vulnerability has been reported in Hp Managed Printing Administration. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Multiple SonicWALL Products Authentication Bypass - Ver2 (CVE-2013-1359)
An authentication bypass vulnerability has been reported in SonicWALL Products. The vulnerability is due to authentication bypass in the Web Administration interface. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Debian DSA-2889-1 : postfixadmin - security update
A SQL injection vulnerability was discovered in postfixadmin, a web administration interface for the Postfix Mail Transport Agent, which allowed authenticated users to make arbitrary manipulations to the database. The oldstable distribution squeeze does not contain postfixadmin. %NASLMINLEVEL 703...
White House Proposal Would End NSA Metadata Program
Privacy advocates are cautiously applauding the reports that the Obama administration will unveil a legislative proposal to end the National Security Agency’s collection of Americans’ bulk phone records, but are concerned what the fine print on that proposal might hold. “Given all the various way...
Virtual Access GW6110A router privilege escalation vulnerability
Overview Virtual Access GW6110A routers contain a privilege escalation vulnerability which could allow an authenticated user to escalate their privileges. Description CWE-472: External Control of Assumed-Immutable Web ParameterVirtual Access GW6110A routers contain a privilege escalation...
Command injection
The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...
CVE-2013-5401
The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...
Cisco SMB routers authemtication bypass
It's possible to bypass authentication for web administration interface...
samba: cross-site request forgery vulnerability in SWAT
Cross-site request forgery CSRF vulnerability in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that...
samba: clickjacking vulnerability in SWAT
The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...
[SECURITY] Fedora 19 Update: 389-ds-base-1.3.1.22-1.fc19
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
[SECURITY] Fedora 20 Update: 389-ds-base-1.3.2.16-1.fc20
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
ZYXEL P-660HN-T1A Router - Authentication Bypass
ZYXEL P-660HN-T1A Router - Authentication Bypass Exploit Title: ZyXEL Router P-660HN-T1A - Login Bypass Date: 11/03/2013 Exploit Author: Michael Grifalconi Vendor Homepage: http://www.zyxel.com/productsservices/p660hntxaseries.shtml?t=p Version: 3.40BYF.5 - Last avaiable If someone is logged on t...