13103 matches found
MikroTik's RouterOS Console Process Memory Corruption Vulnerability
RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A null pointer reference that allows an authenticated remote attacker to send a carefully crafted packet causes t...
LiteSpeed Technologie OpenLiteSpeed WebAdmin Console Code Execution Vulnerability
LiteSpeed Technologie OpenLiteSpeed is LiteSpeed Technologie's open source Web server . WebAdmin Console is one of the Web-based management console program . A security vulnerability exists in WebAdmin Console in LiteSpeed Technologie OpenLiteSpeed versions prior to 1.6.5. An attacker can exploit...
Refresh of WEM agent in admin console fails with error "Some of the requested actions may not have been executed properly"
When attempting to refresh the agents in any way or otherwise perform actions against an agent in the Administration node of the WEM Admin Console, the following message is seen in the bottom right corner: "Some of the requested actions may not have been executed properly." The WEM Agents being...
Valve: [GoldSrc] RCE via 'spk' Console Command
Details: Description RCE can be achieved on clients via the 'spk' console command due to missing length checks before copying into a stack based buffer. POC 1. Place the attached cfg file in the root directory of the game: F676967 2. Launch the game and bring up the console with 3. Type in exec...
CVE-2020-5519
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...
CVE-2020-5519
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...
Design/Logic Flaw
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...
CVE-2020-5519
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...
CVE-2020-5519
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration External App" screen...
MTN Group: Java Debug Console Provides Command Injection Without Privellage Esclation
Summary: I intially found the debug console as a tool to insert arbitrary html/xss bugs, however after further probing the debug console it has some serious security flaws to allow arbitrary java code to be executed. My intial report of a seperate bug using this console,...
Putting Wallarm Management Console on a Fast Track
With this update we significantly reduced Elasticsearch load and thereby improved the responsiveness of the user interface with an attack showing up within seconds of being detected. Our new user-friendly interface has a lag time of no more than 5 seconds. The post Putting Wallarm Management...
Cross site request forgery (csrf)
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...
CVE-2013-0196
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...
CVE-2013-0196
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...
Citrix Licensing Server Vendor Daemon Stops Intermittently
License Administration Console reports an alert stating the Vendor Daemon is down. The server displays the following error: Citrix XenApp cannot contact the license server And / or Qfarm /Load reports a load of 20000...
Vendor Daemon down on License Administration Console
Vendor Daemon Down Licensing Service Crashes License Administration Console error "Vendor Daemon down: CITRIX" and "No such product or vendor exists: CITRIX" displays...
Out of licenses error on License Administration Console
An Out of licenses alert message is received on the License Administration Console LAC...
Citrix XenApp Licenses have been Renamed to Citrix Virtual Apps
Citrix XenAppLicenses have been Renamed toCitrix Virtual Apps Name Change from XenApp to Citrix Virtual Apps Citrix Virtual Apps is the new name for XenApp beginning with the XenApp 7 release. The new name is reflected in all product licenses as well as all licensing-related pages and tools onMy...
How to Change the Licensing Port in Citrix Virtual Apps 6
This article describes how to change Licensing Port in Citrix Virtual Apps 6.0 formerly XenApp. In Citrix Virtual Apps 6.0, changing the licensing server port is done in two places sequentially.This article contains both the processes: 1. Discovery Services Console 2. License Server Administratio...