CVE-2015-8038

Multiple cross-site scripting XSS vulnerabilities in the Graphical User Interface GUI in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sharedjobmanager or 2 SOMServiceObjDialog...

CVE-2015-8037

Multiple cross-site scripting XSS vulnerabilities in the Graphical User Interface GUI in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the 1 SOMVpnSSLPortalDialog or 2 FGDMngUpdHistory...

CVE-2015-8037

Fortinet FortiManager GUI (pre-5.2.4) is affected by CVE-2015-8037 due to two XSS vectors in SOMVpnSSLPortalDialog and FGDMngUpdHistory. Remote attackers can inject arbitrary web script/HTML. Remediation: upgrade FortiManager to version 5.2.4 or later (as indicated by the affected range). The sou...

CVE-2015-8038

Fortinet FortiManager GUI is affected by multiple XSS vulnerabilities in versions prior to 5.2.4, allowing remote attackers to inject arbitrary web script or HTML via the sharedjobmanager or SOMServiceObjDialog components. The issue is rooted in the FortiManager GUI (not a backend service) and th...

Infernal-Twin - This Is Evil Twin Attack Automated (Wireless Hacking)

This tool is created to aid the penetration testers in assessing wireless security. Author is not responsible for misuse. Please read instructions thoroughly. Usage sudo python InfernalWireless.py How to install $ sudo apt-get install apache2 $ sudo apt-get install mysql-server...

Design/Logic Flaw

The web-based GUI in Cisco Adaptive Security Appliance ASA CX Context-Aware Security 9.34.1.11 allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105...

CVE-2015-6344

The web-based GUI in Cisco Adaptive Security Appliance ASA CX Context-Aware Security 9.34.1.11 allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105...

Cisco ASA CX Context-Aware Security Web GUI Unauthorized Access Vulnerability

A vulnerability in the web-based GUI of Cisco Adaptive Security Appliance ASA CX Context-Aware Security could allow an authenticated, remote attacker to enumerate users and read user information without belonging to a role that allows those operations. The vulnerability is due to insufficient...

Information disclosure

The Web Management GUI on Cisco Wireless LAN Controller WLC devices with software 7.4140.0 and 8.0120.0 allows remote attackers to cause a denial of service client disconnection via unspecified vectors, aka Bug ID CSCuw10610...

Cisco Wireless LAN Controller Client Disconnection Vulnerability

A vulnerability in the Web Management GUI of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to trigger client disconnection. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Oracle: Security Advisory (ELSA-2013-0500)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FortiManager 5.2.2 -持久型 XSS 漏洞

2 个确定了存在的XSS: 在SOMVpnSSLPortalDialog XSS漏洞。 在FGDMngUpdHistory XSS漏洞。 图形用户界面GUIFortiManager v5.2.3是容易的 一个反射 XSS 漏洞和一个存储 XSS 漏洞。 另外 2 个确定了存在的XSS: 在sharedjobmanager XSS漏洞。 在SOMServiceObjDialog XSS漏洞。 受影响的产品 XSS项目1 - 2:FortiManager v5.2.2或更早。 XSS项目3 - 4:FortiManager v5.2.3或更早。...

Windows Spy Keylogger - Software to Log Keystrokes in Stealth Mode for 32-bit/64-bit processes on Windows XP/Vista/7/8/10

Windows Spy Keylogger is the free software to help you covertly monitor all activities on your computer. It intercepts everything that is typed on keyboard and stores into one log file which you can view it anytime later. You can track logins , passwords , emails , chats and all other secret thin...

FortiManager 5.2.2 - Persistent Cross-Site Scripting

FortiManager 5.2.2 - Persistent Cross-Site Scripting + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================...

FortiManager 5.2.2 - Persistent Cross-Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security...

FortiManager 5.2.2 - Persistent XSS Vulnerabilities

Exploit for cgi platform in category web applications Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security management appliance that allows you to centrally manage any number of Fortinet...

FortiManager 5.2.2 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security...

Multiple XSS vulnerabilities in FortiManager GUI

...

Linux Memory Scanner: scanmem

Linux Memory Scanner scanmem is a debugging utility designed to isolate the address of an arbitrary variable in an executing process. scanmem simply needs to be told the pid of the process, and the value of the variable at several different times. After several scans of the process, scanmem...

Automate Vulnerability Scanning: Seccubus

Seccubus automates regular vulnerability scans with vrious tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. The goal is to reduce the analysis time for subsequent scans of the same infrastructure by only reporting delta findings...