Drupal 7.12 - Multiple Vulnerabilities

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Drupal CMS 7.12 latest stable release Multiple Vulnerabilities Date : 02-03-2012 Author : Ivano Binetti http://ivanobinetti.com...

PT-2012-2527

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 4.x through 7.0 before 7.0.220.0 Cisco Wireless LAN Controller WLC versions 7.1 before 7.1.91.0 Cisco Wireless LAN Controller WLC versions 7.2 before 7.2.103.0 Description The administrative managemen...

DFLabs PTK <= 1.0.5 Multiple Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : DFLabs PTK = 1.0.5 Multiple Vulnerabilities Steal Authentication Credentials...

D-Link DSL-2640B ADSL Router - Authentication Bypass

D-Link DSL-2640B ADSL Router - Authentication Bypass +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router Authentication Bypass Date : 22-02-2012 Author : Ivano...

D-Link DSL-2640B Authentication Bypass

Exploit for hardware platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router Authentication Bypass Date : 22-02-2012 Author : Iva...

Cisco Linksys WAG54GS CSRF Change Admin Password

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012 Author : Ivano...

D-Link DSL-2640B ADSL Router - Cross-Site Request Forgery

D-Link DSL-2640B ADSL Router - Cross-Site Request Forgery +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti...

D-Link DSL-2640B (ADSL Router) CSRF Vulnerability

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti...

D-Link DSL-2640B Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.d-link.com...

PT-2012-2512

Name of the Vulnerable Software and Affected Versions Cisco IronPort Encryption Appliance versions prior to 6.5.3 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via the header parameter to the defau...

Debian Security Advisory DSA 2376-1 (ipmitool)

The remote host is missing an update to ipmitool announced via advisory DSA 2376-1. OpenVAS Vulnerability Test $Id: deb23761.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2376-1 ipmitool Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Oracle Fusion WebLogic Server Component WLS-Console Management Interface Unspecified XSS

The version of the WebLogic component on Oracle Middleware installed on the remote Windows host is affected an unspecified cross-site scripting vulnerability related to WLS-Console. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the...

Symantec Endpoint Protection Manager Detection

The management interface for Symantec Endpoint Protection, an endpoint security solution, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57766; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Symantec...

DSA-2376-1 ipmitool - insecure pid file

Bulletin has no description...

tomcat: password disclosure vulnerability

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

CVE-2011-3636

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

CVE-2011-3636: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

FreeIPA: CSRF vulnerability

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

Muster Render Farm Management System - Arbitrary File Download

Name: Muster Render Farm Management System Arbitrary File Download Vendor Website : http://www.vvertex.com/muster.html Date Released : November 29, 2011 Affected Software : Muster 6.20 Researcher : Nick Freeman [email protected] Description Security-Assessment.com has discovere...