premiointegrabbva.es XSS vulnerability

Vulnerable URL: http://www.premiointegrabbva.es/intranet/login.php Details: Description| Value ---|--- Patched:| Yes, at 04.05.2016 Latest check for patch:| 04.05.2016 15:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank...

intranet-software.hulkvideo.ml XSS vulnerability

Vulnerable URL: http://intranet-software.hulkvideo.ml/search.php?id="...

用友某系统直接登录Getshell(修复不当哦)

简要描述： ... 详细说明： 用友某系统Websphere https://211.144.131.98:9043/ibm/console/ 输入admin进入后台 http://211.144.131.98:9080/safetest/index.jsp 马 然后就是： WooYun: 用友某系统Websphere直接登录Getshell 内网什么的. 运维不够负责啊 漏洞证明： ···...

intranet.codigo-id.com XSS vulnerability

Vulnerable URL: http://intranet.codigo-id.com/password.php?email=%27%22%3E%3E%3C/title%3E%27%22%3ESCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:47 GMT Vulnerability type:|...

Endress+Hauser FieldCare CodeWrights HART Comm DTM Component Arbitrary File Read Vulnerability

Endress+Hauser FieldCare is a suite of applications for managing the FDT/DTM framework.CodeWrights HART Comm DTM is a component for providing communication protocol information to the FDT/DTM framework application. A security vulnerability in the CodeWrights HART Comm DTM group used by...

CVE-2015-6463

CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via a longtag XML schema containing an external entity declaration in...

CVE-2015-6463

CVE-2015-6463 concerns CodeWrights HART Comm DTM components used with Endress+Hauser FieldCare. The vulnerability arises from processing a longtag XML schema containing an external entity declaration and an entity reference (XXE), enabling a remote attacker to read arbitrary files, issue HTTP req...

Good Technology Authentication Insecure Coupling

---------------------------------------------------------------- v1 - modzero Security Advisory: Insecure application-coupling in Good Authentication Delegation MZ-15-03 ---------------------------------------------------------------------...

Default credentials

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

CVE-2015-2915

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

CVE-2015-5912

The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses...

Design/Logic Flaw

The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses...

PT-2015-2130

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to errors in the code of the CFNetwork FTPProtocol component. It allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses. This ca...

CVE-2015-5912: Undefined Security Weakness

The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses...

Actiontec GT784WN Modem Cross-Site Request Forgery Vulnerability

The Actiontec GT784WN is a DSL Digital Subscriber Line modem router from Actiontec USA. A cross-site request forgery vulnerability exists in Actiontec GT784WN modems using firmware versions prior to NCS01-1.0.13. A remote attacker could exploit the vulnerability to hijack authentication or hijack...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

CVE-2015-2905

The CVE-2015-2905 entry affects the Actiontec GT784WN Wireless N DSL Modem. The vulnerability is a Cross-Site Request Forgery (CSRF) in firmware versions prior to NCS01-1.0.13, which enables a remote attacker to hijack authentication or an intranet connection for arbitrary users. Affected device:...

CVE-2015-2905

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

PT-2015-5966

Name of the Vulnerable Software and Affected Versions Actiontec GT784WN versions prior to NCS01-1.0.13 Description A cross-site request forgery issue allows remote attackers to hijack the authentication or intranet connectivity of users. Recommendations For versions prior to NCS01-1.0.13, update...

CVE-2015-2905: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...