Cisco Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in Cisco Hosted Collaboration Solution could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks. The vulnerability is due to insufficient validation of a user-supplied value. An attacker could exploit this vulnerability by convincing a user to...

Cisco Prime Central for Hosted Collaboration Solution Cross-Site Request Forgery Vulnerability

Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A cross-site request forgery vulnerability exists in Cisco Prime Central for Hosted Collaboration...

Cisco Hosted Collaboration Solution Arbitrary Command Execution Vulnerability

Cisco Hosted Collaboration Solution HCS is a suite of hosted collaboration solutions. The solution includes Cisco TelePresence, Customer Collaboration and Unified Communications products to support customers using collaboration technologies in public, private and hybrid cloud models. A security...

Design/Logic Flaw

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

CVE-2015-0750

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

CVE-2015-0750

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.61 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596...

CVE-2015-0741

CVE-2015-0741 affects Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) versions down to 10.6(1) and earlier. The issue is multiple cross-site request forgery (CSRF) vulnerabilities (Bug ID CSCut04596) that could allow remote attackers to hijack the authentication of arbitrary users....

ProjectSend Cross-Site Scripting Vulnerability

ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A cross-site scripting vulnerability exists in ProjectSend. An attacker can exploit the vulnerability to execute arbitrary script code in the context of an affected site to steal cookie-based...

ProjectSend Arbitrary File Upload Vulnerability

ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. An arbitrary file upload vulnerability exists in ProjectSend. An attacker can exploit the vulnerability to upload arbitrary files to an affected application...

ProjectSend Cross-Site Request Forgery Vulnerability

ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A cross-site request forgery vulnerability exists in ProjectSend. An attacker can exploit the vulnerability to perform unauthorized actions within the context of a user session...

Cisco Hosted Collaboration Solution Information Disclosure Vulnerability

Cisco Hosted Collaboration Solution HCS is a cloud service that provides communication and collaboration solutions. A security vulnerability exists in Cisco Hosted Collaboration Solution SOAP that could be exploited by an attacker to obtain sensitive information and perform unauthorized access...

Cisco Hosted Collaboration Solution Unauthorized System Access Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP Interface of the Cisco Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted system. An attacker could exploit the vulnerability by transmitting crafted Challenge SOAP...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

Gogs (Go Git Service) Detection (HTTP)

HTTP based detection of Gogs Go Git Service. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Authentication fails on Push to Stash

When I attempt to Push commit of a few dozen files to the Stash-hosted Git repository, I receive the attached error indicating an authentication failure...

MalwaRE - Malware Repository Framework

malwaRE is a malware repository website created using PHP Laravel framework, used to manage your own malware zoo. malwaRE was based on the work of Adlice team with some extra features. If you guys have any improvements, please let me know or send me a pull request. Features Self-hosted solution...

Cisco Hosted WebEx Meeting Center Configuration Manipulation Vulnerability

A vulnerability in the Cisco Hosted WebEx Meeting Center service could allow an unauthenticated, remote attacker to enable meeting features that were explicitly disabled by the meeting organizer or site administrator. The vulnerability is due to improper checking of certain meeting parameters whe...

ProjectSend Arbitrary File Upload Vulnerability

ProjectSend is a suite of self-hosted applications based on PHP and MySQL. An arbitrary file upload vulnerability exists in ProjectSend that allows remote attackers to execute arbitrary PHP code by uploading a file with the PHP file extension...