Digital Guardian Management Console 7.1.2.0015 Shell Upload

Title: Digital Guardian Managment Console - Arbitrary File Upload Leading To Remote Code Execution RCE Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10173 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============...

Unspecified Vulnerability in Oracle Hospitality Simphony First Edition (CNVD-2018-09080)

Oracle Hospitality Simphony First Edition is an enterprise hospitality management platform that delivers point-of-sale POS and back-office functionality on fixed and mobile devices to support stadiums, arenas and other food and beverage operations. An unspecified vulnerability exists in the...

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2018-09084)

Oracle Hospitality Simphony provides a modern user experience that delivers relevant information to guests through smooth, real-time tiled presentations. An unspecified vulnerability exists in the Enterprise Management Console component of Oracle Hospitality Simphony. An attacker could exploit th...

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage:...

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage:...

CVE-2017-6323

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...

Server side request forgery (ssrf)

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...

CVE-2017-6323

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...

CVE-2017-6323

CVE-2017-6323 affects Symantec Management Console versions prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6 and ITMS 7.6_POST_HF7. Root cause is processing XML input with a reference to an external entity by a weakly configured XML parser (XXE). Potential impact includes disclosure of confidential data, ...

CVE-2017-6323

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...

Unable to open PVS Console after upgrade to 7.17

Unable to open PVS Console after upgrade to PVS 7.17 with error An unhandled exception occurred and the application will exit. Please report the information below. Press Ctrl-C to copy the data to the clipboard. Method not found: '!!0 System.Array.Empty'. Stack Trace: at...

The vulnerability of the registration and accounting subsystem of the wireless access point for Moxa AWK-3131A industrial systems allows a intruder to execute arbitrary commands with root privileges.

The vulnerability of the registration and accounting subsystem of the wireless access point for Moxa AWK-3131A industrial systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious act...

The vulnerability of the ReadDDSInfo function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the ReadDDSInfo function in the coders/dds.c file of the console-based image editing tool ImageMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Command injection

An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client in firmware versions 1.4 to 1.7 current. An attacker can inject commands via the username parameter of several...

CVE-2017-14459

CVE-2017-14459 affects the Moxa AWK-3131A industrial Wi‑Fi AP/bridge/client. The vulnerability is an OS command injection via the username parameter in Telnet, SSH and the local console login, allowing remote, unauthenticated, root‑level command execution. Root cause is tied to BusyBox loginutils...

Unrestricted file upload

Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway ASG and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code...

CVE-2017-13678

Stored XSS vulnerability in the Symantec Advanced Secure Gateway ASG and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application...

CVE-2016-10258

Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway ASG and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code...

CVE-2017-13677

Denial-of-service DoS vulnerability in the Symantec Advanced Secure Gateway ASG and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause denial-of-service through management console application crashes...

CVE-2017-13677

CVE-2017-13677 is a DoS vulnerability in Symantec ASG and ProxySG management consoles. A remote attacker can send crafted HTTP/HTTPS requests to trigger application crashes, affecting management-console availability. Affected are ASG and ProxySG SGOS versions prior to the specified remediations. ...