1278 matches found
PT-2017-10469
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue arises when Microsoft Edge renders a domain-less page in the URL. This could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access...
SSRF Vulnerability in Jspxcms Enterprise Open Source Web Content Management System
jspxcms is an open source, Java-based content management system CMS. An SSRF vulnerability exists in the source and upfile parameters of the classes\com\jspxcms\core\web\fore\UploadController.java file in Jspxcms, which allows an attacker to initiate a request to an intranet host to obtain the...
Security feature bypass
A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."...
CVE-2017-0159
A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."...
Open Atrium - Moderately critical - Information Disclosure - SA-CONTRIB-2017-041
Open Atrium is a distribution the enables collaboration sites to be built. It contains several custom modules to provide various functionality. While content is often protected behind private groups, public content can also be shared. When using Open Atrium as an internal Intranet, this "public"...
ADFS Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests. To exploit this vulnerability, an attacker could run a specially crafted application and attempt to brute-force an account password. An attacker who successfully...
PT-2017-10432
Name of the Vulnerable Software and Affected Versions Windows 10 version 1607 Windows Server 2012 R2 Windows 2016 Description A security feature bypass issue exists when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests. This allows attackers to affect the system...
Weak Password Vulnerability in Vulnerability Scanning System of Nanjing Iridium Information Technology Co.
Nanjing Iridium Information Technology Co., Ltd. vulnerability scanning system is a vulnerability scanner that supports IP address segment batch reverse domain name checking and intranet penetration scanning, which can support host vulnerability scanning, Web vulnerability scanning, weak password...
Joomla! Intranet Component Attendance Track SQL Injection Vulnerability
Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the attendance track of the Joomla! Intranet component. An attacker can exploit the vulnerability to access or modify database data...
Joomla Intranet Attendance Track 2.6.5 SQL Injection
Exploit Title: Joomla! Component Intranet Attendance Track v2.6.5 - SQL Injection Google Dork: inurl:index.php?option=comintranet Date: 25.02.2017 Vendor Homepage: http://thagatpam.in/ Software Buy:...
Joomla Intranet Attendance Track 2.6.5 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component Intranet Attendance Track v2.6.5 - SQL Injection Google Dork: inurl:index.php?option=comintranet Date: 25.02.2017 Vendor Homepage: http://thagatpam.in/ Software Buy:...
Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection
Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection Exploit Title: Joomla! Component Intranet Attendance Track v2.6.5 - SQL Injection Google Dork: inurl:index.php?option=comintranet Date: 25.02.2017 Vendor Homepage: http://thagatpam.in/ Software Buy:...
Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection
Exploit Title: Joomla! Component Intranet Attendance Track v2.6.5 - SQL Injection Google Dork: inurl:index.php?option=comintranet Date: 25.02.2017 Vendor Homepage: http://thagatpam.in/ Software Buy:...
Server side request forgery (ssrf)
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address...
CVE-2017-5518
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address...
CVE-2017-5518
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address...
Microsoft Internet Explorer NetBIOS Spoofing (MS16-063: CVE-2016-3213)
A spoofing vulnerability exists in Microsoft Internet Explorer. The root cause is that an attacker can spoof WAPD requests and force the browser to switch to local Intranet. A remote attacker can exploit this issue by sending a specially crafted meeting request...
TRS Infogate Plugin SSRF Vulnerability
TRS Infogate is a general-purpose plug-in developed by TORS for application on WCM and IDS platforms of national governments, enterprises and institutions. TRS Infogate plug-in page infogate/customer/system/wcmurltest.jsp SSRF vulnerability. The page in the infogate/customer/system directory can...
CVE-2016-6531
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306. NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a...
CVE-2016-6531
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306. NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a...