CVE-2019-15055

Summary (CVE-2019-15055) MikroTik RouterOS versions up to 6.44.5 and 6.45.x up to 6.45.3 are affected by a vulnerability where improper handling of the disk name allows an authenticated user to delete arbitrary files. This can lead to a reset of credential storage, which may enable the attacker t...

CVE-2019-12794

The CVE concerns MISP 2.4.108 where organization admins can reset credentials for site admins, enabling credential abuse when host organizations create lower-privilege admins. An org admin could manually set a site admin password or use the site admin’s API key to impersonate them, with abuse res...

Default credentials

The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2...

Security Bulletin: IBM ToolsCenter Suite is affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)

Summary Security vulnerabilities have been discovered in OpenSSL. Description: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTL Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL. Content Vulnerability...

Directory traversal

A vulnerability in the credential reset functionality for Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to...

CVE-2018-0213

A vulnerability in the credential reset functionality for Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to...

CVE-2018-0213

A vulnerability in the credential reset functionality for Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to...

CVE-2018-0213

CVE-2018-0213 concerns Cisco Identity Services Engine (ISE). A vulnerability in the credential reset functionality allows an authenticated, remote attacker with valid credentials to escalate privileges due to insufficient input validation. Exploitation requires the attacker to authenticate to the...

Cisco Identity Services Engine Authentication Privilege Elevation Vulnerability

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security and streamline their service operations. An elevation of privilege vulnerability exists in the credential reset...

Input validation

A vulnerability in the Operations, Administration, Maintenance, and Provisioning OAMP credential reset functionality for Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation...

CVE-2017-12214

A vulnerability in the Operations, Administration, Maintenance, and Provisioning OAMP credential reset functionality for Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation...

CVE-2017-12214

CVE-2017-12214 describes an elevation-of-privilege flaw in the Cisco Unified CVP OAMP credential reset, arising from insufficient input validation. An authenticated, remote attacker could exploit a crafted HTTP request to gain administrator privileges on CVP systems running 10.5, 11.0, or 11.5. E...

CVE-2017-12214

A vulnerability in the Operations, Administration, Maintenance, and Provisioning OAMP credential reset functionality for Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation...

TP-Link PTWR841N V8 Router Configuration Service Logic Vulnerability

The TP-Link PTWR841N V8 is a wireless router. A logic flaw exists in the TP-Link PTWR841N V8 router configuration service. Due to a logic flaw through the router, it is possible to reset the device's credentials and obtain code execution through a stack overflow vulnerability in the service. An...

TP-Link WR841N code execution( CVE-2017-9466)

CVE-2017-9466: Why Is My Router Blinking Morse Code? We recently discovered two vulnerabilities in TP-Link’s WR841N V8 router that we exploited to obtain custom code execution on the router. After working closely with the vendor to patch the router’s firmware, we are disclosing the details of our...

Dell TrueMobile 2300 - Remote Credential Reset

Dell TrueMobile 2300 - Remote Credential Reset source: https://www.securityfocus.com/bid/15770/info It is possible for remote attackers to gain control of a target TrueMobile 2300 running firmware versions 3.0.0.8 and 5.1.1.6. Other versions are likely affected. The vulnerability appears to be in...