NullLogic Null HTTPd 0.5 Error Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5603/info NullLogic Null HTTPd is a small multithreaded webserver for Linux and Windows. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. As a result, when an...

Hosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may be used to carry out further attacks...

CVE-2014-2502

CVE-2014-2502 refers to a cross-site scripting (XSS) vulnerability in the rsa_fso.swf component of EMC RSA Adaptive Authentication (Hosted) 11.0. The issue is that an attacker could inject arbitrary web script/HTML via unspecified vectors, potentially affecting the integrity of user sessions expo...

PT-2014-4740

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication Hosted version 11.0 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. Recommendations For version 11.0, update to ...

CVE-2014-2502: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in rsafso.swf in EMC RSA Adaptive Authentication Hosted 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Adobe ColdFusion Server invoke() Method Code Execution (CVE-2013-3350)

A remote code execution has been reported in Adobe ColdFusion server. The vulnerability is due to a bug in the invoke method. A remote attacker can exploit this issue by changing values on a page hosted on the affected server...

Cisco Hosted Collaboration Solution (HCS)拒绝服务漏洞

CVE ID: CVE-2014-2121 Cisco Hosted Collaboration Solution HCS是一种云服务，可提供通讯和合作解决方案。 Cisco Hosted Collaboration Solution HCS内基于Java的软件在实现上存在安全漏洞，可使远程攻击者造成拒绝服务。 0 Cisco Hosted Collaboration Solution HCS 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cisco.com/web/solutions/hcs/index.html...

Cisco Hosted Collaboration Solution (HCS)拒绝服务漏洞

CVE ID: CVE-2014-2122 Cisco Hosted Collaboration Solution HCS是一种云服务，可提供通讯和合作解决方案。 Cisco Hosted Collaboration Solution HCS内的Impack服务器中，GUI内存在内存泄露漏洞，可使远程攻击者造成拒绝服务。 0 Cisco Hosted Collaboration Solution HCS 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Cisco Hosted Collaboration Solution Denial of Service Vulnerability

A vulnerability in Java code on the Cisco Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to close TCP ports used by the system. The vulnerability is due to improper packet processing in the Java code. An exploit could allow the attacker to create a denial of...

Cisco Hosted Collaboration Solution Memory Leak Vulnerability

A vulnerability in the graphical user interface of the Impact server in the Cisco Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to cause a memory leak. The vulnerability is due to improper packet processing in the application. An exploit could allow the attacke...

CVE-2014-2121

The Java-based software in Cisco Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service closing of TCP ports via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CSCug82795, and CSCuh58643...

CVE-2014-2121

The Java-based software in Cisco Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service closing of TCP ports via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CSCug82795, and CSCuh58643...

PT-2014-4492

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution HCS affected versions not specified Description The issue in Cisco Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service, specifically the closing of TCP ports, via unspecifi...

CVE-2014-2122: Improper Input Validation

Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service memory consumption via unspecified vectors, aka Bug ID CSCub58999...

CVE-2014-2121: Improper Input Validation

The Java-based software in Cisco Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service closing of TCP ports via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CSCug82795, and CSCuh58643...

PT-2014-4493

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution HCS affected versions not specified Description A memory leak in the GUI of the Impact server allows remote attackers to cause a denial of service by consuming memory via unspecified vectors. Recommendations...

[Weevely v1.1] Stealth tiny PHP web shell

Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation , and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones. Weevely is currently included in Backtrack and Backbox...

CVE-2013-5562

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

CVE-2013-5562

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

Code injection

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...