Default credentials

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

CVE-2014-6099

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

CVE-2014-6099

IBM Sterling B2B Integrator 5.2.x (and Sterling Integrator 5.1) is affected by CVE-2014-6099 due to a lack of login- Brute-force protection on the Change Password screen, enabling potential admin credential compromise. The IBM bulletin lists affected versions (5.2 through 5.2.4; 5.1 as applicable...

Exinda WAN Optimization Suite 7.0.0 CSRF / XSS Vulnerabilities

Exinda WAN Optimization Suite version 7.0.0 2160 suffers from cross site request forgery and cross site scripting vulnerabilities. I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities and CSRF in Exinda WAN Optimization Suite II. BACKGROUND ------------------------- WAN...

CacheGuard-OS 5.7.7 - Cross-Site Request Forgery

CacheGuard-OS 5.7.7 - Cross-Site Request Forgery I. VULNERABILITY ------------------------- CSRF vulnerabilities in CacheGuard-OS v5.7.7 II. BACKGROUND ------------------------- CacheGuard is an All-in-One Web Security Gateway providing firewall, web antivirus, caching, compression, URL filtering...

Authentication flaw

Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain administrative access by visiting the change-password page...

CVE-2014-4976

Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi...

Default credentials

Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi...

Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities

Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi. CVE: CVE-2014-4976 Last updated: March 12, 2018, 5:23 p.m...

viart shop 4.0.5 - CSRF Vulnerability

No description provided by source. +-------------------------------------------------------------------------+ Software : viart shop 4.0.5 Author : Or4nG.M4N Date : n/a Dork : inurl:powered by viart shop 4.0.5 Software Link : http://www.viart.com/...

Beetel 450TC2 Router Admin Password CSRF Vulnerability

No description provided by source. ??!-- Exploit Title: Beetel 450TC2 Router Admin Password Cross Site Request Forgery Vulnerability Date: 30/04/2014 Exploit Author: shyamkumar somana Vendor Homepage: www.beetel.in Version: 450TC2 - Firmware version : TX6-0Q-005retail Tested on: Windows 8 Beetel...

F5 BIG-IQ 4.1.0.2013.0 - Privilege Escalation

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'json' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClien...

Saurus CMS Admin Panel - Multiple CSRF Vulnerabilities

No description provided by source. Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows...

Croogo 1.2.1 - Multiple CSRF Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Croogo 1.2.1 Multiple CSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmaildotcom Date: 07. February 2010...

elgg (xss/csrf/change password) Multiple Vulnerabilities

No description provided by source. + CMS Elgg 1.00 XSS;CSRF;Cambia PasswordMultiple Remote Vulnerabilities + Discovered By ThE Lorddemon [email protected] + Vendor:http://elgg.org/ + Greetings: Project MEMI-Bolivia, OpTix, RTM security Group http://zonartm.og Change Password Remotely:...

Campsite CMS 3.4.0 - Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: Campsite CMS 3.4.0 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download:...

Host Directory PRO 2.1.0 - Remote Change Admin Password Exploit

No description provided by source. titlechange password Host Directory PRO 2.1.0 /title body bgcolor=000000 trtd class=setting form name=config action=http://demo-host-directory-pro.phphostdirectoryscript.com/admin/config method=post h4Configuration/h4 table tr tdfont color=FFFFFFWeb Interface...

Limny 2.0 Change Email and Password - CSRF Exploit

No description provided by source...

ClanWeb 1.4.2 - Remote Change Password / Add Admin Exploit

No description provided by source. =-=-remote change password and add admin xpl-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script:ClanWeb 1.4.2 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

2daybiz Template Monster Clone (edituser.php) Change Pass Exploit

No description provided by source. title Template Monster Clone Change Password /title /head head /head body bgcolor=000000 pfont size=6 color=FF0000a href=http://www.2daybiz.com/ font color=FF00002daybiz/font/a Template Monster Clone /font/p TABLE border=0 width=780 align=center TR TDTABLE...