CVE-2016-10257

The Symantec Advanced Secure Gateway ASG 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack ...

CVE-2016-10256

The CVE-2016-10256 entry concerns Symantec ProxySG management consoles: versions 6.5 (before 6.5.10.6), 6.6, and 6.7 (before 6.7.2.1) are vulnerable to a reflected XSS via a crafted management console URL. An attacker could lure a user (phishing) to execute arbitrary JavaScript in the console cli...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4001)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4001 advisory. - USB: serial: console: fix use-after-free after failed setup Johan Hovold Orabug: 27206830 CVE-2017-16525 - uwb: properly check kthreadrun return...

Hawt.io admin terminal cross-site request forgery vulnerability

Hawt.io is a web console for managing Java frameworks. admin terminal is one of the management terminals. A cross-site request forgery vulnerability exists in the admin terminal in Hawt.io. A remote attacker could use this vulnerability to execute commands on the Karaf server...

Kernel Exploit for Sony PS4 Firmware 4.05 Released, Jailbreak Coming Soon

Wishing you all a very 'belated' Merry Christmas. This holiday season Santa has a very special gift for all PlayStation gamers. Developer SpecterDev finally released a fully-functional much-awaited kernel exploit for PlayStation 4 firmware 4.05 today—almost two months after Team Fail0verflow...

Cambium Networks ePMP Cross-Site Scripting Vulnerability (CNVD-2018-01044)

Cambium Networks ePMP is a wireless network access platform from Cambium Networks. The platform provides video surveillance, Wi-Fi hotspots, and sensor connectivity.Web administration console is one of the administration console programs. A cross-site scripting vulnerability exists in the Device...

Cambium Networks ePMP Command Injection Vulnerability

Cambium Networks ePMP is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. A security vulnerability exists in Cambium Networks ePMP using firmware version 3.5 and prior, which stems from the We...

Veeam Availability Console Cumulative Patch 1376

Challenge Veeam Availability Console Cumulative Patch 1376 Cause Please confirm you are running version 2.0.1.1319 or later prior to installing this cumulative hotfix 1376. You can check this under Windows Programs and features. After upgrading, your build will be version 2.0.1.1376. As a result ...

Cross site scripting

In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting XSS injection...

Path traversal

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users...

CVE-2017-5261

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users...

CVE-2017-5255

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...

CVE-2017-5261

The CVE-2017-5261 entry concerns Cambium Networks cnPilot firmware with a file path traversal in the web administrative console’s ping and traceroute functions, affecting 4.3.2-R4 and earlier. Connected documents corroborate practical exploitability: a Metasploit module (Cambium cnPilot r200/r201...

CVE-2017-5255

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...

CVE-2017-5255

This CVE affects Cambium Networks ePMP firmware up to v3.5. The web management console lacks input sanitation for certain parameters in the get_chart function, allowing an authenticated user (including a low-privilege readonly user) to inject shell metacharacters in a crafted POST and run OS-leve...

VMware AirWatch Console Access Bypass Vulnerability

VMware AirWatch is a console application for the VMware AirWatch Console AWC, a suite of enterprise mobility management solutions from VMware, Inc. An access bypass vulnerability exists in VMware AWC. An attacker could exploit this vulnerability to obtain end-user device information...

The vulnerability of the `usbSerialConsoleDisconnect` function (drivers/usb/serial/console.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbserialconsoledisconnect function in the Linux kernel’s drivers/usb/serial/console.c file relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects through a specially crafted USB...

CVE-2017-4942

VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator...

CVE-2017-4942

The CVE-2017-4942 entry corresponds to VMware AirWatch Console (AWC) with a Broken Access Control vulnerability. The connected VMware advisory VMSA-2017-0020 confirms that successful exploitation could disclose end-user device details to an unauthorized administrator. The advisory documents that ...

Puppet Enterprise console cross-site scripting vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. console is one of the console tools. ...