Lucene search
+L

14067 matches found

zdt
zdt
added 2017/11/05 12:00 a.m.63 views

Avaya OfficeScan (IPO) SoftConsole Remote SEH Buffer Overflow Exploit

Exploit for windows platform in category remote exploits + Credits: John Page aka hyp3rlinx Vendor: ============= www.avaya.com Product: =========== Avaya IP Office IPO v9.1.0 - 10.1 IP Office is Avaya's global midsize solution for enterprises, supporting up to 3,000 users at a single location wi...

6.8CVSS0.3AI score0.09404EPSS
SaveExploits5
Prion
Prion
added 2017/11/02 4:29 p.m.18 views

Design/Logic Flaw

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

5.8CVSS8.7AI score0.00781EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/11/02 4:29 p.m.13 views

CVE-2017-12262

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

8.8CVSS5.7AI score0.00781EPSS
SaveExploits0References3
NVD
NVD
added 2017/11/02 4:29 p.m.25 views

CVE-2017-12262

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

8.8CVSS8.8AI score0.00781EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/11/02 4:00 p.m.28 views

CVE-2017-12262

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

8.8AI score0.00781EPSS
SaveExploits0References3
CVE
CVE
added 2017/11/02 4:00 p.m.61 views

CVE-2017-12262

Cisco APIC-EM (Application Policy Infrastructure Controller Enterprise Module) 1.x before 1.5 is affected by a firewall configuration flaw. The misconfigured firewall rule allows traffic arriving at the device’s public interface to be forwarded to the internal virtual network, enabling an unauthe...

8.8CVSS8.7AI score0.00781EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2017/11/02 12:00 a.m.12 views

Command Injection Vulnerability in Multiple Cisco Products

The Cisco Firepower 4100 Series Next-Generation Firewall NGFW and the Cisco Firepower 9300 Security Appliance are security appliances from Cisco.Smart Licensing Smart Licensing Manager service is one of the license smart management service. A command injection vulnerability exists in the Smart...

9CVSS9.2AI score0.03802EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/02 12:00 a.m.12 views

Cisco Application Policy Infrastructure Controller Enterprise Module Unauthorized Access Vulnerability

Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM is a suite of Cisco applications that provide policy-based automated configuration of end-to-end infrastructure controllers. An unauthorized access vulnerability vulnerability exists in the firewall configuration in Cisc...

8.8CVSS8.7AI score0.00781EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/02 12:00 a.m.33 views

Command Injection Vulnerability in Multiple Cisco Products

Cisco Unified Computing System UCS Manager is a set of embedded device management software. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 9300 Security Appliance are firewall devices. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 930...

7.8CVSS8AI score0.77071EPSS
SaveExploits3References1
Cisco
Cisco
added 2017/11/01 4:00 p.m.70 views

Cisco Application Policy Infrastructure Controller Enterprise Module Unauthorized Access Vulnerability

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

8.8CVSS8.8AI score0.00781EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/11/01 4:00 p.m.78 views

Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Command Injection Vulnerability

A vulnerability in the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device. The vulnerability is due to imprope...

6.7CVSS7.4AI score0.77071EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2017/10/27 9:00 p.m.46 views

Pentest-Tools-Auto-Installer - A Simple Tool For Installing Pentest Tools And Forensic Tools On Debian / Ubuntu Based OS

A Simple tool for installing pentest tools and forensic tools on Debian / Ubuntu Based OS Tested on Linux Mint And Kali Linux I Want To Get This How To Do ?? Change Your Privileges Terminal to Root Mode your@terminal:$ sudo su And Then Clone This your@terminal: git clone...

8.6AI score
SaveExploits0References1
CNVD
CNVD
added 2017/10/27 12:00 a.m.23 views

Memory Leak Vulnerability in Multiple Huawei Products

The Huawei USG9560, 9520, and 9580 are all USG9500 series firewall appliances from Huawei China. A memory disclosure vulnerability exists in multiple Huawei products. An attacker can exploit the vulnerability by accessing a specific web page on the web device to cause the motherboard to reboot an...

7.8CVSS7.4AI score0.00807EPSS
SaveExploits0References1
Prion
Prion
added 2017/10/26 8:29 p.m.22 views

Default credentials

Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...

10CVSS9.3AI score0.01412EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2017/10/26 12:00 a.m.83 views

Check Point Firewall Detection (HTTP)

HTTP based detection of Check Point Firewall. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/10/26 12:00 a.m.57 views

Check Point Firewall Detection (SSH Login)

SSH login-based detection of Check Point Firewall. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7AI score
SaveExploits0
Huawei
Huawei
added 2017/10/25 12:00 a.m.28 views

Security Advisory - DoS Vulnerability in Huawei Firewall Products

There is a DoS vulnerability in some Huawei firewall products. Due to insufficient input validation, a remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device...

7.8CVSS7.5AI score0.01295EPSS
SaveExploits0Affected Software1
Imperva Blog
Imperva Blog
added 2017/10/24 11:00 a.m.61 views

Protecting Xero’s Cloud-Based Accounting Platform from Cyber Attacks

Meeting with customers is always insightful, and recently I got a chance to sit down with Aaron McKeown, head of security engineering and architecture at Xero, to talk about how they use Imperva SecureSphere for their cloud-hosted applications. Founded in 2006, Xero provides cloud accounting...

7AI score
SaveExploits0
seebug.org
seebug.org
added 2017/10/24 12:00 a.m.45 views

Endian Firewall Stored From XSS to Remote Command Execution

Vulnerability Summary The following advisory describes a stored cross site scripting that can be used to trigger remote code execution in Endian Firewall version 5.0.3. Endian Firewall is a “turnkey Linux security distribution, which is an independent, unified security management operating system...

7.7AI score
SaveExploits0
seebug.org
seebug.org
added 2017/10/24 12:00 a.m.84 views

Ikraus Anti Virus Remote Code Execution(CVE-2017-15643)

Vulnerability summary The following advisory describes an remote code execution found in Ikraus Anti Virus version 2.16.7. KARUS anti.virus “secures your personal data and PC from all kinds of malware. Additionally, the Anti-SPAM module protects you from SPAM and malware from e-mails. Prevent...

7.6CVSS8AI score0.06385EPSS
SaveExploits4
Rows per page
Query Builder