Microsoft Windows: Interactive logon: Do not require CTRL+ALT+DEL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winildisablecad.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Do not require CTRL+ALT+DEL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Creatiwity wityCMS Cross-Site Scripting Vulnerability

Creatiwity wityCMS is a lightweight PHP-based model-view-controller-oriented content management system CMS. A cross-site scripting vulnerability exists in the 'Website's name' field on the 'Settings' page under the 'General' menu in version 0.6.1 of Creatiwity wityCMS. ' field in the 'Settings'...

openSUSE: Security Advisory for enigmail (openSUSE-SU-2018:1454-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

wityCMS 0.6.1 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: wityCMS 0.6.1 Persistent XSS on "Website's name" field Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: https://creatiwity.net/witycms Software Link:...

library.palmettogeneral.com XSS vulnerability

Open Bug Bounty ID: OBB-623799 Description| Value ---|--- Affected Website:| library.palmettogeneral.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| StayWell Solutions Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

CVE-2018-11512

Stored cross-site scripting XSS vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to...

Cross site scripting

Stored cross-site scripting XSS vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to...

CVE-2018-11512

Stored cross-site scripting XSS vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to...

Linux/x86 - Bind (5555/TCP) Shell Shellcode (98 bytes)

include / ; Bind TCP Shellcode ; Copyright 2018, Luca Di Domenico ; ; This program is free software: you can redistribute it and/or modify ; it under the terms of the GNU General Public License as published by ; the Free Software Foundation, either version 3 of the License, or ; at your option an...

wityCMS 0.6.1 Cross Site Scripting

Exploit Title: wityCMS 0.6.1 Persistent XSS on "Website's name" field Date: 05/28/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: https://creatiwity.net/witycms Software Link: https://github.com/Creatiwity/wityCMS/releases/tag/0.6.1 Version: 0.6.1 Tested on:...

CVE-2018-11512: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to...

Input Validation Error Vulnerability in Various GE PACSystems Products

PACSystems RX3i CPE305/310,RX3i CPE330,RX3i CPE 400 are programmable automation controller products of GE. An input validation error vulnerability exists in various GE PACSystems products. The vulnerability stems from the device failing to properly validate inputs, allowing a remote attacker to...

Silex SD-320AN and GE MobileLink Unauthorized Operation Vulnerability

Silex SD-320AN is a serial device server from Silex Technology, Japan. GE MobileLink GEH-500 is an electrocardiogram analysis system from General Electric GE. A security vulnerability exists in Silex SX-500 and GE MobileLink GEH-500 versions 1.54 and earlier, which arises from the program's failu...

Silex SD-320AN and GE MobileLink Remote Code Execution Vulnerability

Silex SD-320AN is a serial device server from Silex Technology, Japan.GE MobileLink GEH-SD-320AN is an ECG analysis system from General Electric GE. A security vulnerability exists in Silex SD-320AN version 2.01 and earlier and GE MobileLink GEH-SD-320AN GEH-1.1 and earlier, which stems from the...

ssl.tonewheelgeneral.com XSS vulnerability

Open Bug Bounty ID: OBB-614656 Description| Value ---|--- Affected Website:| ssl.tonewheelgeneral.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the microprogramming software of the General Electric D60 Line Distance Relay allows a intruder to execute arbitrary code.

The vulnerability of the microprogramming software of the General Electric D60 Line Distance Relay device is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the SSH protocol from a remote location...

PuTTY Portable Detection (Windows SMB Login)

SMB login and WMI file search based detection of PuTTY Portable. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Path Traversal

Overview All versions of general-file-server are vulnerable to path traversal. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not use this module until a fix has been provided. References - HackerOne Report - GitHub Advisory...

general-tp.com XSS vulnerability

Open Bug Bounty ID: OBB-604627 Description| Value ---|--- Affected Website:| general-tp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-2865

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Consolidation Hierarchy Viewer. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacke...