CVE-2020-35338: Use of Hard-coded Credentials

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server 20.2.8 and earlier has a default account with a password of "pokon."...

PT-2020-17310

Name of the Vulnerable Software and Affected Versions Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server versions 20.2.8 and earlier Description The Web Administrative Interface in the affected software has a default account with a password of pokon. Recommendations For versions 20.2...

Administrative Interface Exposed

kirby CMS does not securely restrict access to the administrative interface. The admin panel installation can be accessed on a .dev domain even though restrictions are set in place to deny access...

CVE-2020-5679

Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted...

PT-2020-18608

Name of the Vulnerable Software and Affected Versions GS108Ev3 versions 2.06.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. This could lead to changes in the product's settings without the user's intention...

IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow

Exploit Title: IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow Exploit Author: Paolo Stagno aka VoidSec Vendor Homepage: https://www.ibm.com/support/knowledgecenter/en/SSGSG77.1.0/com.ibm.itsm.tsm.doc/welcome.html Version: 5.2.0.1...

Exploit for CVE-2020-28054

Tivoli-Madness Advisory for: + CVE-2020-28054: An Authorizati...

The vulnerability of the administrative web interface of the Cisco Identity Services Engine allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the administrative web interface of the Cisco Identity Services Engine relates to errors in password storage. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2020-14434

Name of the Vulnerable Software and Affected Versions Cohesive Networks vns3:vpn appliances versions prior to 4.11.1 Description The administrative interface of the affected appliances is susceptible to authenticated remote code execution, which can result in server compromise. Recommendations Fo...

CVE-2020-15467: Improper Neutralization of Special Elements used in an OS Command

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

[SECURITY] Fedora 31 Update: python-flask-admin-1.5.6-1.fc31

Flask-Admin is advanced, extensible and simple to use administrative interf ace building extension for Flask framework. It comes with batteries included: model scaffolding for SQLAlchemy, MongoEngine, MongoDB and Peewee ORMs, simple file management interface and a lot of usage samples. You're not...

[SECURITY] Fedora 32 Update: python-flask-admin-1.5.6-1.fc32

Flask-Admin is advanced, extensible and simple to use administrative interf ace building extension for Flask framework. It comes with batteries included: model scaffolding for SQLAlchemy, MongoEngine, MongoDB and Peewee ORMs, simple file management interface and a lot of usage samples. You're not...

Fedora: Security Advisory for python-flask-admin (FEDORA-2020-e8f384af5f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Command injection

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...

CVE-2020-7117

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...

CVE-2020-9409

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a...

Design/Logic Flaw

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote leak of sensitive/arbitra...

Unraid 6.8.0 Authentication Bypass / Arbitrary Code Execution Exploit

This Metasploit module exploits two vulnerabilities affecting Unraid 6.8.0. An authentication bypass is used to gain access to the administrative interface, and an insecure use of the extract PHP function can be abused for arbitrary code execution as root. This module requires Metasploit:...

CVE-2020-7255

Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface...

Privilege escalation

Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface...