CVE-2015-6362

The web GUI in Cisco Connected Grid Network Management System CG-NMS 3.00.35 and 3.00.54 allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640...

IBM Security Guardium Access Privilege Vulnerability

IBM Security Guardium is a data activity monitor product from IBM USA. The product offers features such as automated controls for compliance and protection against internal and external threats. A security vulnerability exists in the diag script of IBM Security Guardium. A local attacker could...

PHP Server Monitor has multiple vulnerabilities

PHP Server Monitor is a set of open source Web-based tools used to monitor servers and Web sites . PHP Server Monitor suffers from cross-site scripting and elevation of privilege vulnerabilities that could be exploited by remote attackers to elevate privileges or obtain sensitive information and...

USN-2789-1: XScreenSaver vulnerability

It was discovered that XScreenSaver incorrectly handled unplugging an external monitor. An attacker with physical access could use this flaw to gain access to a locked session...

PHP Server Monitor Version Detection

Detects the installed version of PHP Server Monitor. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

PHP Server Monitor Multiple CSRF Vulnerabilities

PHP Server Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpserver:monitor";...

[SECURITY] [DLA 338-1] xscreensaver security update

Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...

PHP Server Monitor 3.1.1 Cross Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPSRVMONITOR-CSRF.txt Vendor: ================================ www.phpservermonitor.org...

Janitza UMG Session Token Flaw Vulnerability

The Janitza UMG is an online power quality monitor for the energy industry from Janitza Germany. Janitza UMG 508, 509, 511, 604,605 has a session-token flaw. Allows a remote attacker to perform calculations on the session-token value and determine the PIN value...

Janitza UMG has multiple cross-site scripting vulnerabilities

The Janitza UMG is an online power quality monitor for the energy industry from Janitza Germany. The Janitza UMG 508, 509, 511, 604, 605, suffers from multiple cross-site scripting vulnerabilities. This allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Janitza UMG Arbitrary File Read/Write Vulnerability (CNVD-2015-07286)

The Janitza UMG is an online power quality monitor for the energy industry from Janitza Germany. An arbitrary file read/write vulnerability exists in Janitza UMG 508, 509, 511, 604, 605. This allows remote attackers to read or write files via a TCP session on port 21...

PHP Server Monitor 3.1.1- Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPSRVMONITOR-CSRF.txt Vendor: ================================ www.phpservermonitor.org...

PHP Server Monitor 3.1.1 - Cross-Site Request Forgery Privilege Escalation

PHP Server Monitor 3.1.1 - Cross-Site Request Forgery Privilege Escalation function doit var e=document.getElementById'HELL' e.submit input type="text" name="...

PHP Server Monitor 3.1.1 - Cross-Site Request Forgery / Privilege Escalation

function doit var e=document.getElementById'HELL' e.submit input type="...

PHP Server Monitor 3.1.1 Privilege Escalation

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPSRVMONITOR-PRIV-ESCALATE.txt Vendor: ================================ www.phpservermonitor.org...

PHP Server Monitor 3.1.1- CSRF Privilege Escalation Vulnerability

Exploit for php platform in category web applications function doit var e=document.getElementById'HELL' e.submit input type="text" name="name" v...

PHP Server Monitor 3.1.1 - Multiple Cross-Site Request Forgery Vulnerabilities

PHP Server Monitor 3.1.1 - Multiple Cross-Site Request Forgery Vulnerabilities + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPSRVMONITOR-CSRF.txt Vendor: ================================ www.phpservermonitor.org...

PHP Server Monitor 3.1.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPSRVMONITOR-CSRF.txt Vendor: ================================ www.phpservermonitor.org...

UBUNTU-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

Updated dbus packages fixes security vulnerability

Updated dbus packages provides security hardening and fixes some bugs Security hardening: On Unix platforms, change the default configuration for the session bus to only allow EXTERNAL authentication secure kernel-mediated credentials-passing, as was already done for the system bus. This avoids...