898 matches found
Solarwinds Firewall Security Manager 6.6.5 Client Session Handling Vulnerability
This module exploits multiple vulnerabilities found in Solarwinds Firewall Security Manager 6.6.5. The first vulnerability is an authentication bypass via the Change Advisor interface due to a user-controlled session.putValue API in userlogin.jsp, allowing the attacker to set the 'username'...
CVE-2014-7465
The PC Advisor aka com.triactivemedia.pcadvisor application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The PC Advisor aka com.triactivemedia.pcadvisor application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7465
CVE-2014-7465 affects the Android PC Advisor (com.triactivemedia.pcadvisor). The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate. The material does not specify affected ...
CVE-2014-7465
The PC Advisor aka com.triactivemedia.pcadvisor application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
EMC Network Configuration Manager session fixation
Report Advisor session fixation...
ESA-2014-055: EMC Network Configuration Manager (NCM) Report Advisor Session Fixation Vulnerability
ESA-2014-055.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-055: EMC Network Configuration Manager NCM Report Advisor Session Fixation Vulnerability EMC Identifier: ESA-2014-055 CVE Identifier: CVE-2014-2509 Severity Rating: CVSS v2 Base Score: 6.9 AV:A/AC:M/Au:N/C:C/I:P/A:P Affected...
Microsoft Internet Explorer 5.0.1 Content Advisor File Handling Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive...
EMC Data Protection Advisor 5.8.1 - Denial of Service
No description provided by source...
EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet RCE
No description provided by source. EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution tested against: Microsoft Windows Server 2008 r2 sp1 EMC Data Protection Advisor 5.8 sp5 vulnerability: the DPA Illuminator service DPAIlluminator.exe listening on public port 80...
Webmoney Advisor ActiveX Remote DoS Exploit
No description provided by source. html Pwnage Page object classid='clsid:3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840' id='target' /object script language='vbscript' targetFile = C:\Program Files\WebMoney Advisor\wmadvisor.dll prototype = Sub Redirect ByVal url As String memberName = Redirect progid =...
Skybox Security 6.3.x - 6.4.x - Multiple Information Disclosure
Exploit for hardware platform in category web applications Exploit Title: SKYBOX Security – Multiple Information Disclosure Date: 22-Jan-2014 Exploit Author: Luigi Vezzoso Vendor Homepage: http://www.skyboxsecurity.com Version: Skybox View Appliances with ISO versions: 6.3.33-2.14, 6.3.31-2.14,...
CVE-2014-2406
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges...
Design/Logic Flaw
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges...
HP B-series SAN Network Advisor Installed (Windows)
Binary data hpb-seriessannetworkadvisorinstalled.nbin...
HP B-series SAN Network Advisor < 12.1.1 Remote Code Execution (Windows)
The version of HP B-series SAN Network Advisor on the remote Windows host is a version prior to 12.1.1. As such, it is affected by a remote code execution vulnerability. It should be noted that while the associated references report on a remote code execution vulnerability in EMC Connectrix Manag...
HP B-series SAN Network Advisor < 12.1.1 Remote Code Execution (Linux)
The version of HP B-series SAN Network Advisor on the remote Linux host is a version prior to 12.1.1. As such, it is affected by a remote code execution vulnerability. It should be noted that while the associated references report on a remote code execution vulnerability in EMC Connectrix Manager...
EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution
EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution tested against: Microsoft Windows Server 2008 r2 sp1 EMC Data Protection Advisor 5.8 sp5 vulnerability: the "DPA Illuminator" service DPAIlluminator.exe listening on public port 8090 tcp/http and 8453 tcp/https is...
HP SAN Network Advisor code execution
No description provided...
[security bulletin] HPSBHF02953 rev.1 - HP B-series SAN Network Advisor, Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04045640 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04045640 Version: 1 HPSBHF02953 rev....