Directory traversal

Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On MCSSO before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows remote authenticated users to read an unspecified file containing a hash of the administrator passwo...

CVE-2014-2536

CVE-2014-2536 affects McAfee Cloud Identity Manager 3.0/3.1/3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1/2.5. The vulnerability is a directory traversal that allows remote authenticated users to read an unspecified file containing a hash o...

CVE-2014-2536: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On MCSSO before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows remote authenticated users to read an unspecified file containing a hash of the administrator passwo...

Cisco TelePresence Video Communication Server Expressway Default SSL Certificate Vulnerability

A vulnerability in the Cisco TelePresence Video Communication Server VCS Expressway could allow an unauthenticated, remote attacker to execute a man-in-the-middle MITM attack between one or more affected devices. The vulnerability occurs because the same default SSL certificate is used across all...

CVE-2014-0675

Cisco TelePresence Video Communication Server (VCS) Expressway is affected by CVE-2014-0675 due to using the same default X.509 SSL certificate across multiple customers, with the private key published. This enables potential MITM-style interception across SSL sessions if an attacker can leverage...

CVE-2014-0675

The Expressway component in Cisco TelePresence Video Communication Server VCS uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's tru...

CVE-2014-0675: Undefined Security Weakness

The Expressway component in Cisco TelePresence Video Communication Server VCS uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's tru...

Tandberg MXP F7.0 (USER) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== Tandberg MXP F7.0 USER Remote Buffer Overflow PoC =================================================== TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We...