Cisco Network Services Orchestrator Network Plug and Play server component privilege access control vulnerability

Cisco Network Services Orchestrator NSO is the United States Cisco Cisco company's set of network automation service solutions. network Plug and Play server is one of the network plug and play server components. A privilege access control vulnerability exists in the Network Plug and Play server...

Powerlogic / Schneider Electric IONXXXX Series - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Powerlogic Schneider Electric IONXXXX Series - Cross-Site Request Forgery Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Version: ION73XX series, ION75XX series, ION76XX series, ION8650 series,...

Intelbras NCLOUD 300 1.0 Authentication Bypass

coding: utf-8 Exploit Title: Intelbras NCloud Authentication bypass Date: 16/05/2018 Exploit Author: Pedro Aguiar - [email protected] Vendor Homepage: http://www.intelbras.com.br/ Software Link: http://www.intelbras.com.br/empresarial/wi-fi/para-sua-casa/roteadores/ncloud Version: 1.0 Test...

Shenzhen JetVision Technology Co., Ltd. video conferencing system has an overstepping access vulnerability

Shenzhen JetVision Technology Co., Ltd. video conferencing system is a new set of video conferencing communication system for customers in different industries to meet their video communication needs. There is an override access vulnerability in the video conferencing system of Shenzhen JetVision...

Security Advisory-CSRF Vulnerability in Huawei HiLink Products

Several Huawei HiLink products have the CSRF Vulnerability. When users use these devices to visit websites that contain malicious scripts, the malicious scripts can exploit the vulnerability to change the configurations or use the functions of products. Vulnerability ID: HWPSIRT-2014-0243 This...

CVE-2010-0596

Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain...

cacti -- SQL injection and command execution vulnerabilities

Bonsai information security reports: A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the "exportitemid" parameter to "templatesexport.php" script is not properly sanitized before being used in a SQL query. The sam...

CVE-2001-1426

Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...