9704 matches found
CVE-2014-6032
CVE-2014-6032 describes multiple XXE flaws in the Configuration utility of F5 BIG-IP products (LTM, ASM, GTM, Link Controller, AAM, ARM, Analytics, APM/Edge Gateway, PEM, PSM, WOM, Enterprise Manager) affecting versions ranging from 10.0.0 through 10.2.4 and 11.0.0 through 11.6.0 (and related hot...
Code injection
F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value...
CVE-2013-7408
F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value...
CVE-2013-7408
Summary of CVE-2013-7408 (F5 BIG-IP Analytics): 11.x before 11.4.0 uses a predictable analytics session cookie, allowing remote attackers to guess the cookie value with unspecified impact. The vulnerability affects BIG-IP Analytics across multiple sources, with evidence in Red Hat and F5 advisory...
PT-2014-3423
Name of the Vulnerable Software and Affected Versions F5 BIG-IP Analytics versions 11.x before 11.4.0 Description The issue is related to a predictable session cookie, which could allow remote attackers to have an unspecified impact by guessing the cookie value. Recommendations For F5 BIG-IP...
CVE-2013-7408: Undefined Security Weakness
F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value...
TIBCO Spotfire Analytics Server Web Application Multiple Vulnerabilities
The remote host is running a version of TIBCO Spotfire Analytics Server that is affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists that allows a remote attacker to view or modify sensitive information. CVE-2011-3132 - A session fixation vulnerability exists that...
TIBCO Spotfire Analytics Server Authentication Module Unspecified Information Disclosure
The remote host is running a version of TIBCO Spotfire Analytics Server that is affected by an information disclosure vulnerability due to an unspecified flaw in the Authentication Module. A remote attacker can exploit this vulnerability to access sensitive information by sending a specially...
F5 Networks BIG-IP : iControl vulnerability (K15220)
The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through 11.5.1, BIG-IP AFM and PEM 11.3.0 through 11.5.1, BIG-IP Analytics 11.0.0 through 11.5.1, BIG-IP Edge Gateway, WebAccelerator, WOM 11.0.0 through 11.3.0, Enterprise Manager...
SAP Patches Seven Vulnerabilities in Three Products
SAP pushed out patches to address seven vulnerabilities in three different lines of software it produces. If exploited, the bugs – which weren’t disclosed until yesterday – could expose those running the systems to specialized attacks, information disclosure and in some cases, complete compromise...
Django: CSRF protection bypass on any Django powered site via Google Analytics
I shall explain all the steps to create the final PoC in order to be more clear. Part 1. Cookie Injection via Google Analytics --------------------- Reported to Google, rewarded, still working Google Analytics sets the cookie to track user source:...
CVE-2014-5454
Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...
CVE-2014-5454
Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...
CVE-2014-5454
CVE-2014-5454: Unrestricted file upload vulnerability in the image upload module of SAS Visual Analytics 6.4M1 that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and then accessing it via unspecified vectors. The provided documents co...
PT-2014-6484
Name of the Vulnerable Software and Affected Versions SAS Visual Analytics version 6.4M1 Description The issue concerns an unrestricted file upload vulnerability in the image upload module. This allows remote authenticated users to execute arbitrary code by uploading a file with an executable...
CVE-2014-5454: Undefined Security Weakness
Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...
Google Analytics Dashboard 2.0.4 - gad-admin-pages-posts.php pid Parameter SQL Injection
The google-analytics-dashboard WordPress plugin was affected by a gad-admin-pages-posts.php pid Parameter SQL Injection security vulnerability...
Google Analytics MU 2.3 - google-analytics-mu-network.php Analytics Code Manipulation CSRF
The google-analytics-mu WordPress plugin was affected by a google-analytics-mu-network.php Analytics Code Manipulation CSRF security vulnerability...
