CVE-2018-10173

CVE-2018-10173 affects Digital Guardian Management Console 7.1.2.0015 and enables authenticated remote code execution via an Arbitrary File Upload vulnerability. The NVD entry documents a NETWORK attack with LOW attack complexity and no user interaction, resulting in high impact (C/H/I/A: HIGH). ...

CVE-2018-10176

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

CVE-2018-10174

The CVE concerns Digital Guardian Management Console 7.1.2.0015 with a server-side request forgery (SSRF) vulnerability. The issue lets remote attackers induce the console to access file:// URLs to read arbitrary files, and to send TCP traffic to intranet hosts or obtain NTLM hashes, even when th...

CVE-2018-10175

CVE-2018-10175 affects Digital Guardian Management Console 7.1.2.0015 and is an XML External Entity (XXE) injection vulnerability. The connected CNVD entry specifies an XML external entity injection that could allow an attacker to cause external web requests, enumerate web content, or read files ...

CVE-2018-10176

The CVE-2018-10176 entry concerns Digital Guardian Management Console 7.1.2.0015, which exposes a directory traversal vulnerability enabling an attacker to read arbitrary files on the server. Publicly documented details come from CNVD-2018-08777, which explicitly describes a path traversal flaw i...

CVE-2018-10173

Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...

CVE-2018-10174

Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...

CVE-2018-10175

Digital Guardian Management Console 7.1.2.0015 has an XXE issue...

Digital Guardian Management Console 7.1.2.0015 XXE Injection

Title: Digital Guardian Managment Console - XML External Entity Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10175 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============ Digital Guardian is an American data los...

Digital Guardian Management Console 7.1.2.0015 XXE Injection Vulnerability

Exploit for asp platform in category web applications Title: Digital Guardian Managment Console - XML External Entity Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10175 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description:...

Digital Guardian Management Console 7.1.2.0015 Server Side Request Forgery Vulnerability

Exploit for asp platform in category web applications Title: Digital Guardian Managment Console - Server Side Request Forgery Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10174 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015...

Digital Guardian Management Console 7.1.2.0015 Server Side Request Forgery

Title: Digital Guardian Managment Console - Server Side Request Forgery Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10174 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============ Digital Guardian is an American...

Digital Guardian Management Console 7.1.2.0015 Shell Upload

Title: Digital Guardian Managment Console - Arbitrary File Upload Leading To Remote Code Execution RCE Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10173 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============...

Digital Guardian Management Console 7.1.2.0015 Arbitrary File Read

Title: Digital Guardian Managment Console - Arbitrary File Read Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10176 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description : ============= Digital Guardian is an American data...

guardianglass.com XSS vulnerability

Open Bug Bounty ID: OBB-585771 Description| Value ---|--- Affected Website:| guardianglass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

See how I in Switzerland's largest hosting providers in the system found a database disclosure vulnerability-vulnerability warning-the black bar safety net

! In the development of our latest security SaaS process, the product allows any user to test their server security level, we on our own site were detected. Since the site is hosted on Switzerland's largest hosting provider of taking into account the relevant legal issues, this article for the ti...

Poor Security at the UK National Health Service

The Guardian is reporting that "every NHS trust assessed for cyber security vulnerabilities has failed to meet the standard required." This is the same NHS that was debilitated by WannaCry. EDITED TO ADD 2/13: More news. And don't think that US hospitals are much better...

blind-guardian-shop.com XSS vulnerability

Open Bug Bounty ID: OBB-367651 Description| Value ---|--- Affected Website:| blind-guardian-shop.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Tor Project Brings Security Slider Feature to Android App Orfox

Tor Project developers recently bolstered Orfox, a Tor Browser for Android devices, to help privacy-conscious mobile browsers better customize their security. Tor Project developers partnered with the Guardian Project to release the first iteration of the app last December. It’s essentially an...

guardian-bank.com XSS vulnerability

Vulnerable URL: http://guardian-bank.com/about-us/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6424772 VIP website status:| No Check guardian-bank.com SSL...