ABB 1SAP520100R0001 CP620 Control Panel Detection

Binary data 756356.prm...

ABB 1SAP565200R0001 CP665-WEB Control Panel Detection

Binary data 756375.prm...

ABB 1SAP551200R0001 CP651-WEB Control Panel Detection

Binary data 756366.prm...

ABB 1SAP535110R6001 CP635-FB Control Panel Detection

Binary data 756363.prm...

Siemens SPC4320.320-L1 Control Panel Detection

Binary data 762147.prm...

CVE-2019-11426

An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter...

CVE-2019-9841

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL...

CVE-2019-9841

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL...

Cross site scripting

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL...

CVE-2019-9841

CVE-2019-9841 affects Vesta Control Panel 0.9.8-23 and is a reflected/URL-based cross-site scripting vulnerability disclosed by multiple sources (NVD, OSV, CVE List). The issue is triggered by a crafted URL that leads to XSS in the product’s web interface (notably via the file-manager API per lin...

CVE-2019-9841

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL...

CVE-2018-13810

A vulnerability has been identified in CP 1604 All versions, CP 1616 All versions. The integrated configuration web server of the affected CP devices could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation...

DirectAdmin 1.561 - Multiple Vulnerabilities

DirectAdmin 1.561 - Multiple Vulnerabilities Title: DirectAdmin Multiple Vulnerabilities to Takeover the Server = v1.561 Date: 12.04.2019 Author: InfinitumIT Vendor Homepage: https://www.directadmin.com/ Version: Up to v1.561. CVE: CVE-2019-11193 [email protected] && infinitumit.com.tr...

Juniper Networks EX4300-MP Junos OS Security Feature Issue Vulnerability

The Juniper Networks EX4300-MP is a 4300 series enterprise switch from Juniper Networks, U.S.A. Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability exists in Juniper Networks EX4300-MP in Junos OS version 18.2. An attacker could...

DirectAdmin 1.561 Cross Site Scripting

Title: DirectAdmin Multiple Vulnerabilities to Takeover the Server = v1.561 Date: 12.04.2019 Author: Numan OZDEMIR Vendor Homepage: https://www.directadmin.com/ Version: Up to v1.561. CVE: CVE-2019-11193 [email protected] && [email protected] Detailed:...

TP-Link Routers Vulnerable to Zero-Day Buffer Overflow Attack

Two models of TP-Link’s budget routers are vulnerable to zero-day flaws that allow attackers to take control of both. The routers in question are models TP-Link WR940N and TL-WR941ND, according IBM Security, which found the bugs and posted a technical analysis on its discoveries on Monday. “In th...

Synology DiskStation Manager Cross-Site Scripting Vulnerability (CNVD-2019-08963)

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A cross-site scripting vulnerability exists in the Control Panel SSO setting ...

Authentication flaw

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

Cross site scripting

Cross-site scripting XSS vulnerability in Control Panel SSO Settings in Synology DiskStation Manager DSM before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter...