cns.888.com XSS vulnerability

Vulnerable URL: https://cns.888.com/downloadclient.htm/?wtv=%3C/script%3E%3Cscript%20src=https://openbugbounty.org/1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cns.888poker.com XSS vulnerability

Vulnerable URL: https://cns.888poker.com/download-poker/?wtv=%3C/script%3E%3Cscript%20src=https://openbugbounty.org/1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2015-6375

Cisco Networking Services (CNS) for IOS 15.2(2)E3 is affected by CVE-2015-6375, where the debug-logging (debug CNS) feature can allow a local authenticated user to disclose sensitive information by reading an unspecified file. The issue stems from insufficient protections of sensitive data at res...

PT-2015-7208

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.22E3 Description The issue allows local users to obtain sensitive information by reading an unspecified file due to the debug-logging feature in Cisco Networking Services CNS for IOS. Recommendations For Cisco IOS version...

WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal

No description provided by source. Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the...

Code injection

The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service daemon reload via a malformed DHCPv6 packet, aka Bug ID CSCuo07437...

CVE-2014-2155

The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service daemon reload via a malformed DHCPv6 packet, aka Bug ID CSCuo07437...

CVE-2014-2155

CVE-2014-2155 affects Cisco CNS Network Registrar 7.1. The DHCPv6 server module is vulnerable to denial of service via malformed DHCPv6 packets, causing the DHCPv6 daemon to reload or crash. Impact is a partial availability degradation (DoS) of the DHCPv6 service. Exploitation could be remote wit...

CVE-2014-2155: Improper Input Validation

The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service daemon reload via a malformed DHCPv6 packet, aka Bug ID CSCuo07437...

PT-2014-4513

Name of the Vulnerable Software and Affected Versions Cisco CNS Network Registrar version 7.1 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon reload, by sending a malformed DHCPv6 packet to the DHCPv6 server module. Recommendations For Cisco CNS...

CVE-2012-4031

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 langid cookie to port 85...

Directory traversal

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 langid cookie to port 85...

CVE-2012-4031

CVE-2012-4031 affects WANGKONGBAO CNS-1000 and CNS-1100 UTM appliances (Network Security Platform). The vulnerability is a directory traversal in src/acloglogin.php exploitable via the lang or langid cookie (port 85), allowing remote attackers to read arbitrary files. Public details show exploita...

PT-2012-5156

Name of the Vulnerable Software and Affected Versions Wangkongbao CNS-1000 and 1100 Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to read arbitrary files. The attack can be performed by including a .. dot dot in the lang ...

CVE-2012-4031: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 langid cookie to port 85...

WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversal

This module exploits the WANGKONGBAO CNS-1000 and 1100 UTM appliances aka Network Security Platform. This directory traversal vulnerability is interesting because the apache server is running as root, this means we can grab anything we want! For instance, the /etc/shadow and /etc/passwd files for...

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal Metasploit Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The...

Cisco CNS Network Registrar默认验证信息验证绕过漏洞

Bugtraq ID: 48076 CVE ID：CVE-2011-2024 Cisco CNS Network Registrar提供高可扩展性和可靠性的DNS, DHCP和TFTP服务。 Cisco Network Registrar包含一个使用默认密码的管理员账户，攻击者可以利用此漏洞以管理员特权更改Cisco Network Registrar的设置 Cisco CNS Network Registrar 7.1 Cisco CNS Network Registrar 7.0 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

wp-10-0001: Multiple Browser Wildcard Cerficate Validation Weakness

Westpoint Security Advisory --------------------------- Title: Multiple Browser Wildcard Cerficate Validation Weakness Risk Rating: Low Author: Richard Moore [email protected] Test Cases: Simon Ward [email protected] Date: 14 July 2010 Advisory ID: wp-10-0001 URL:...

Fedora 12 : sendmail-8.14.4-3.fc12 (2010-5470)

This new version of sendmail fixes security bug - handling of bogus certificates with NULLs in CNs. Also many other bugs have been fixed, for complete list please see: http://www.sendmail.org/releases/8.14.4 Note that Tenable Network Security has extracted the preceding description block directly...