183 matches found
The vulnerability of the system scripts of the automation software Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability of system scripts in the automation software Application Policy Infrastructure Controller, when installed during the download process, is related to the lack of measures to neutralize special elements used in commands. Exploiting this vulnerability allows an attacker to enhance...
SQL Injection Vulnerability in OrderController.class.php in ShopsN 2.0 Official Frontend
ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN 2.0 official version of the front-end OrderController.class.php SQL injection...
CVE-2017-6772
A vulnerability in Cisco Elastic Services Controller ESC could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to the application and...
CVE-2017-2319
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authent...
Schneider Modicon M221CE16R Hard-Coded Vulnerability
The Modicon M221CE16R is an all-in-one programmable controller from Schneider Electric Co. The Schneider Modicon M221CE16R is vulnerable to a hard-coded vulnerability where XML files are AES-CBC encrypted, but the key used for encryption is hard-coded and cannot be changed. After decrypting the X...
Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2017-04995)
The Cisco Wireless LAN Controller is a Cisco wireless LAN controller. A denial of service vulnerability exists in Cisco Wireless LAN Controller, which allows attackers to exploit the vulnerability to launch denial of service attacks...
Security update for xen (important)
This updates xen to version 4.5.5 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable...
The vulnerability of the Cisco Wireless LAN Controller 4500 software allows a malicious individual to cause service failure.
The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...
The vulnerability of the Cisco Wireless LAN Controller 4400 software allows a malicious individual to cause service failure.
The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...
The vulnerability of the Cisco Wireless LAN Controller 5500 software allows a malicious individual to cause service failure.
The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...
DEBIAN-CVE-2016-4439
The espregwrite function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash or potentially execute arbitrary code o...
Cisco Wireless LAN Controller Unauthorized Access Vulnerability
The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. An unauthorized access vulnerability exists in the Cisco Wireless LAN Controller WLC software that could be exploited by an...
libvirt / qemu security vulnerabilities
Crash on PCI registers, IDE controller and Physical Region Descriptor Table decoder. Code execution...
ALCASAR <= 2.8.1 - Remote Root Code Execution Vulnerability
Exploit for php platform in category web applications !/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8.1 Remote Root Code Execution Vulnerability Author: eF Date : 2014-09-12 URL : http://www.alcasar.net/ This is not a responsible disclosure coz' I have no sense of ethics and I don't give a...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (3rd)
No description provided by source. !-- Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "UserProfile.asp" that an authenticated user can change other's profiles. Why is it dangerous: a user can change other's email address and then...
hosting061.txt
Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9...
Hosting Controller unauthenticated user registeration
-= Security Advisory =- Advisory Information Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9 Vend...
CVE-2005-0695
The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
Exploit for unknown platform in category remote exploits ======================================================================= Hosting Controller = 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability ======================================================================= Advisory Information...
Hosting Controller Multiple Script Arbitrary Directory Browsing
The Hosting Controller application resides on this server. This version is vulnerable to multiple remote exploits. At attacker may make use of this vulnerability and use it to gain access to confidential data and/or escalate their privileges on the Web server. %NASLMINLEVEL 70300 This script was...