PT-2018-17817

Name of the Vulnerable Software and Affected Versions Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 affected versions not specified Description A missing X-Frame-Options header in the web application could be used by a remote attacker for clickjacking, as demonstrated by...

PT-2018-14677

Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description A NULL pointer dereference exists in the ff vc1 parse frame header adv function in vc1.c, which can be exploited by attackers to cause a denial-of-service through a crafted file. Recommendations For Libav version...

CVE-2018-0378

A vulnerability in the Precision Time Protocol PTP feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of...

CVE-2018-0378: Improper Input Validation

A vulnerability in the Precision Time Protocol PTP feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of...

PT-2018-1741

Name of the Vulnerable Software and Affected Versions Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software affected versions not specified Description A vulnerability in the Precision Time Protocol PTP feature could allow an unauthenticated, remote attacker to cause a...

Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities

Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requirements Version: 0.9.8.480 Tested on: Centos 7 Vulnerabilit...

Centos Web Panel 0.9.8.480 XSS / LFI / Code Execution

Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber GA1/4venlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requirements Version: 0.9.8.480 Tested on: Centos 7...

Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities

Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requiremen...

CentOS Web Panel 0.9.8.480 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requiremen...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

Design/Logic Flaw

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18207

CVE-2018-18207 affects Virtualmin 6.03. The vulnerability arises from a flaw in the settings-editor_read.cgi file parameter, enabling Frame Injection . Exploitation details or successful exploit status are not provided in the connected documents. No remediation details are specified here.

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

PT-2018-14367

Name of the Vulnerable Software and Affected Versions Virtualmin version 6.03 Description The issue allows Frame Injection via the settings-editor read.cgi file parameter. Recommendations For Virtualmin version 6.03, consider restricting access to the settings-editor read.cgi file to minimize the...

Cisco HyperFlex Software UI Clickjacking Vulnerability

Cisco HyperFlex Software is a scalable distributed file system from Cisco USA. The system provides unified compute, storage and networking through cloud management, providing enterprise-class data management and optimization services. A security vulnerability exists in the Web UI in Cisco HyperFl...

Virtualmin 6.03 Multiple Vulnerabilities

Exploit for cgi platform in category web applications Exploit Title: Virtualmin 6.03 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: https://www.virtualmin.com/ Software Link: https://www.virtualmin.com/download.html Version: 6.03...

CVE-2018-18207: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

DEBIAN-CVE-2018-11763

In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol...

Google Android WLAN Buffer Overflow Vulnerability (CNVD-2018-19607)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. WLAN in Android suffers from a buffer overflow vulnerability that originates in the WMA API where the program fails to detect...