157 matches found
Kyocera ECOSYS M2640IDW Cross-Site Scripting Vulnerability
The Kyocera ECOSYS M2640IDW is a multifunction printer from Kyocera, Japan. A cross-site scripting vulnerability exists in Kyocera printer ECOSYS M2640IDW, which was discovered when adding a contact to Machine Address Book. Successful exploitation of this vulnerability could result in the hijacki...
PAN-OS: Panorama session disclosure during context switch into managed device
An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administrator's session to a managed device when the Panorama administrator performs a context switch into that device. This vulnerability allows an attacke...
glpi -- Unauthenticated File Deletion
MITRE Corporation reports: In GLPI before version 9.5.2, the pluginimage.send.php endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the files and folde...
Contact Form 7 Datepicker <= 2.6.0 - Authenticated Stored Cross-Site Scripting (XSS)
Contact Form 7 Datepicker registers an AJAX action to save settings which calls a function that fails to perform a capability check or nonce check. As such, a logged-in attacker with minimal permissions such as a subscriber can send a crafted request which will store a malicious JavaScript in the...
Pulse Secure VPN - Arbitrary Command Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pulse Secure VPN Arbitrary Command Execution', 'Description' = %q This module exploits a post-auth command injection in the Pulse Secure VPN serv...
gksu-polkit input validation error vulnerability
gksu-polkit is a package for authenticating users to enter commands. An input validation error vulnerability exists in the xauth source file in versions prior to gksu-polkit 0.0.3, which can be exploited by an attacker to compromise an administrator X11 session...
CVE-2011-0703
In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...
Session fixation
In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...
CVE-2011-0703
In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...
Pulse Secure VPN Arbitrary Command Execution Exploit
This Metasploit module exploits a post-auth command injection in the Pulse Secure VPN server to execute commands as root. The env1 command is used to bypass application whitelisting and run arbitrary commands. Please see related module auxiliary/gather/pulsesecurefiledisclosure for a pre-auth fil...
CVE-2019-15233
The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie...
Command injection
The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie...
CVE-2019-15233
CVE-2019-15233 affects the Live:Text Box macro in Old Street Live Input Macros for Confluence, with XSS in versions before 2.11 that can steal an Administrator session cookie. The issue arises from injected JavaScript in a Confluence element, enabling session hijacking when a page containing the ...
Authorisation bypass in the ViewUpgrades resource - CVE-2019-8443
The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to access the ViewUpgrades administrative resource without needing to...
Session fixation
Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ logi...
CVE-2019-10008
Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ logi...
Atlassian JIRA Access Control Error Vulnerability
JIRA is a tool developed by the Australian company Atlassian for defect tracking, issue tracking and project management. An Access Control Error vulnerability exists in Atlassian JIRA, which can be exploited by a remote attacker who has gained administrator session access to access certain...
Unspecified Vulnerability in Actiontec WCB6200Q
The Actiontec WCB6200Q is a WiFi network extender from Actiontec USA. A security vulnerability exists in the Actiontec WCB6200Q prior to version 1.1.10.20a, which stems from the program failing to securely create an administrator login session cookie.An attacker could use this vulnerability to...
The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism, which stems from the absence of a CSRF token in web forms, allows for the hijacking of the administrator’s session.
The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism lies in the absence of a CSRF token in web forms. Exploiting this vulnerability allows an attacker to forge inter-site requests and intercept the administrator’s session...
Monstra CMS Cross-Site Scripting Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the 'title' function of the plugins/box/pages/pages.plugin.php...