588 matches found
Cisco RV180 VPN and RV180W Wireless-N Multifunction VPN Routers Unauthorized Access Vulnerability
A vulnerability in the web interface of the Cisco RV180 VPN Router and Cisco RV180W Wireless-N Multifunction VPN Router could allow an unauthenticated, remote attacker to access arbitrary files on the system. This vulnerability allows the attacker to perform directory traversal. The vulnerability...
The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a perpetrator to bypass the authentication process.
The vulnerability of the Mobile and Remote Access MRA component of the Cisco TelePresence Video Communication Server software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures using a trusted...
The vulnerability of the ScreenOS operating system, which allows a hacker to trigger a service failure
The vulnerability of the ScreenOS operating system’s administrative web service interface exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures by using specially crafted SSL packets...
The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a remote intruder to execute any desired code.
The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to inject JavaScript code into the device remotely...
The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.
The vulnerability of the NX-OS network operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted LLDP packets over the local network...
Security Advisory - Insufficient Input Verification Vulnerability in the FusionAccess
FusionAccess is a kind of virtual desktop applications based on Huawei cloud platform. Through the deployment of Huawei desktop cloud software on the cloud platform, customers can access the cloud desktop by the thin client device or other devices. There is an insufficient input verification...
PicoPhone Internet Phone 1.63 Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9969/info It has been reported that Picophone is prone to a remote buffer overflow vulnerability. This issue is due to the application failing to verify the size of user input before storing it in a finite buffer...
CORE FORCE Firewall 0.95.167 and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27341/info CORE FORCE Firewall and Registry modules are prone to multiple local kernel buffer-overflow vulnerabilities because the software fails to adequately verify user-supplied input. Local attackers can exploit these...
RedHat Linux 6.x X Font Server DoS and Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This will prevent the X server from...
Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities
No description provided by source. Title : Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://struts.apache.org/ Advisory : http://secpod.org/blog/?p=450...
Pre Ads Portal <= 2.0 - Remote SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV98$2008 ----------------------------------------------------------------------------------------- ECHOADV98$2008 Pre Ads Portal = 2.0 Sql Injection Vulnerability...
ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities
No description provided by source. Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory : http://secpod.org/blog/?p=497...
HiveMaker Professional <= 1.0.2 (cid) SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV96$2008 ----------------------------------------------------------------------------------------- ECHOADV96$2008 HiveMaker Professional = 1.0.2 cid Sql Injection...
BarracudaDrive 6.7.2 Cross Site Scripting
Exploit Title : BarracudaDrive Content Management System Multiple XSS Vulnerabilities Author : Manish Kishan Tanwar Vendor : http://barracudadrive.com Software : BarracudaDrive 6.7.2 Date : 15/05/2014 Discovered At : IndiShell LAB indishell.in aka indian cyber army Love to : zero cool,Team...
BarracudaDrive 6.6 Cross Site Scripting
Title : BarracudaDrive Multiple XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies Pvt. Ltd. http://www.secpod.com Vendor : http://barracudadrive.com Advisory : http://secpod.org/blog/?p=2158 http://secpod.org/advisories/SecPodBarracudaDriveMultXSSVuln.txt Software : BarracudaDrive...
FluxBB 1.5.3 - Multiple Vulnerabilities
Exploit for php platform in category web applications !-- FluxBB 1.5.3 Multiple Remote Vulnerabilities Vendor: FluxBB Product web page: http://www.fluxbb.org Affected version: 1.5.3 Summary: FluxBB is fast, light, user-friendly forum software for your website. Desc: FluxBB suffers from a cross-si...
Basilic diff.php Arbitrary Command Execution (CVE-2012-3399)
The vulnerability is due to lack of input verification in the affected function A remote attacker can exploit this issue by sending a specially crafted script to the target. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands as the www-data...
Advantech Webaccess HMI/SCADA Software - Persistence Cross-Site Scripting
Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Cyclope Employee Surveillance Solution < 6.2.1 SQLi Vulnerability - Active Check
Cyclope Employee Surveillance Solution is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
ArticleSetup Multiple Persistence XSS / SQL Injection Vulnerabilities
Exploit for php platform in category web applications Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Overview: --------- ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities. Technical Description:...