463 matches found
DataTaker DT80 dEX 1.50.012 Sensitive Configuration Exposure
Title: DataTaker DT80 dEX 1.50.012 - Sensitive Configurations Exposure + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: CVE-2017-11165 Vendor: ===============...
DataTaker DT80 dEX 1.50.012 - Information Disclosure
DataTaker DT80 dEX 1.50.012 - Information Disclosure + Title: DataTaker DT80 dEX 1.50.012 - Sensitive Configurations Exposure + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE:...
CVE-2017-6045
An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...
CVE-2017-6045
Summary: CVE-2017-6045 is an information disclosure vulnerability in Trihedral VTScada prior to version 11.2.26. The issue arises from files being exposed within the web server to unauthenticated users, potentially revealing sensitive configuration data. Affected product/version: VTScada before 1...
Hardcoded credentials
SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338...
Format string
Siemens SIMATIC STEP 7 TIA Portal before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors...
WIN-911 7.17.00 - Multiple Vulnerabilities
Exploit for windows platform in category local exploits Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation...
CVE-2016-5849
CVE-2016-5849 affects Siemens SICAM PAS up to version 8.07, where an authenticated local attacker can obtain sensitive configuration information from the SICAM PAS database file if the database is in a stopped state. The issue is an information exposure vulnerability (not remote-exploit) requirin...
Citrix Endpoint Management (XenMobile) Server Support Bundle Overview
The following table has key information about Citrix Endpoint Management XenMobile Server Support Bundle. For additional information please review the following link. This includes: List of log files included in the bundle Log type Description of what is included in the log file Analytical value ...
Cross site request forgery (csrf)
Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DSStore and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request...
CVE-2016-1776
CVE-2016-1776 affects Apple OS X Server before 5.1, in the Web Server component. The issue is an information disclosure where access to .DS_Store and .htaccess files is not properly restricted, allowing remote attackers to obtain sensitive configuration information via HTTP. Mitigation: upgrade t...
Design/Logic Flaw
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated b...
Information disclosure
The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...
CVE-2015-2184
ZeusCart 4 is affected by an information-disclosure vulnerability: remote attackers can retrieve configuration data by invoking the getphpinfo operation on admin/ which triggers the PHP phpinfo() function. This exposes sensitive configuration details and is documented across multiple sources (NVD...
CVE-2015-2184
ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function...
From one upload to Maxthon within the network-vulnerability warning-the black bar safety net
From one upload to Maxthon within the network The first is to find a sub-domain name of the upload custom. maxthon. cn In the upload icon when only verifies the content-type is not on file after the judgment ! 1532ed2be1f9d7260dd9085f527ba9e0. png Simple modification packages to get to the shell ...
NAT-PMP Protocol vulnerability 1 2 0 0 million routers at risk-vulnerability and early warning-the black bar safety net
Present in the embedded device vulnerability, especially the kind of small office and home office route, is never a steady stream. This week security researchers discovered a serious vulnerability, because theNAT-PMP Protocol improper design will affect more than 1 2 0 0 million of the router...
NAT-PMP Security Vulnerability Affects 1.2M Routers
Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...