CVE-2018-20903

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

CVE-2018-20903

CVE-2018-20903 concerns cPanel prior to 71.9980.37, where the WHM Backup Configuration interface is vulnerable to self-XSS (SEC-421). The root cause is user input not properly validated client-side, allowing injected script when viewed in the backup config context. Impact is self-XSS in the inter...

CVE-2018-20903: Improper Neutralization of Input During Web Page Generation

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

PT-2019-10334

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows self XSS in the WHM Backup Configuration interface. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the issue...

CVE-2019-10662

Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? URI...

CVE-2018-14077

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

NetApp SnapCenter Information Disclosure Vulnerability

NetApp SnapCenter is a suite of applications from NetApp, Inc. that provide the ability to back up, validate, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server version... A security vulnerability exists in NetApp SnapCenter versions 2.0 through 3.0.1. A remote attacke...

Hitron CVE-30360 Information Disclosure Vulnerability

Hitron CVE-30360 devices is a router device from China Zhongqi Hitron. A security vulnerability exists in the Hitron CVE-30360 devices, which originates from a program sharing the 578A958E3DD933FC DES key used. The vulnerability can be exploited by an attacker to obtain sensitive information by...

CVE-2014-10069

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

CVE-2014-10069

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

CVE-2014-10069

CVE-2014-10069 (Hitron CVE-30360) affects Hitron CVE-30360 devices. The vulnerability arises from a DES key 578A958E3DD933FC shared across installations, allowing attackers to decrypt a backup configuration file (evidenced by a password hash in um_auth_account_password). CVSS metrics: CVSS2 base ...

CVE-2014-10069: Undefined Security Weakness

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

PT-2018-4158

Name of the Vulnerable Software and Affected Versions Hitron devices affected versions not specified Description The issue allows attackers to obtain sensitive information by decrypting a backup configuration file. This is possible because the devices use a shared DES key, 578A958E3DD933FC, acros...

iBall ADSL2+ Home Router Authentication Bypass

Exploit Title: iBall ADSL2+ Home Router Authentication Bypass Vulnerability CVE: CVE-2017-14244 Date: 15-09-2017 Exploit Author: Gem George Author Contact: https://www.linkedin.com/in/gemgrge Vulnerable Product: iBall ADSL2+ Home Router WRA150N https://www.iball.co.in/Product/ADSL2--Home-Router/7...

iBall ADSL2+ Home Router - Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: iBall ADSL2+ Home Router Authentication Bypass Vulnerability CVE: CVE-2017-14244 Exploit Author: Gem George Author Contact: https://www.linkedin.com/in/gemgrge Vulnerable Product: iBall ADSL2+ Home Router WRA150N...

Backup Configuration Is Not Saved After Configuring Backup Job

Challenge After installing Veeam Agent for Microsoft Windows and configuring a backup job, the settings are not shown in the Control Panel, and Veeam Agent for Microsoft Windows keeps prompting to configure backup settings. Cause The Windows OS was installed with non-English region and culture...

CVE-2016-9314: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto thei...

PT-2017-10051

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance IWSVA versions prior to 6.5 CP 1737 Description The issue allows authenticated, remote users with least privileges to backup the system configuration and download it onto their local machine...

Trend Micro InterScan Web Security Virtual Appliance Information Disclosure Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A sensitive information disclosure vulnerability exists in Trend Micro IWSVA version 6.5...

Technicolor TC7200 - Credentials Disclosure

No description provided by source. Exploit Title: Technicolor TC7200: Authentication Bypass Google Dork: N/A Date: 24-02-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/ Software Link:...