CVE-2018-10285: Incorrect Permission Assignment for Critical Resource

The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication...

Cloudview NMS File Upload

require 'msf/core' class MetasploitModule 'Cloudview NMS File Upload', 'Description' = %q This module exploits a file upload vulnerability found within Cloudview NMS 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', '0day' , 'DefaultOptions' = 'EXITFUNC' = 'thread', , 'Privileged' =...

Cloudview NMS 2.00b Writable Directory Traversal Execution

require 'msf/core' class MetasploitModule "Cloudview NMS 2.00b Writable Directory Traversal Execution", 'Description' = %q This module exploits a vulnerability found in Cloudview NMS server. The software contains a directory traversal vulnerability that allows a remote attacker to write arbitrary...

Cloudview NMS 2.00b - Writable Directory Traversal Execution (Metasploit)

require 'msf/core' class MetasploitModule "Cloudview NMS 2.00b Writable Directory Traversal Execution", 'Description' = %q This module exploits a vulnerability found in Cloudview NMS server. The software contains a directory traversal vulnerability that allows a remote attacker to write arbitrary...

Cloudview NMS 2.00b - Writable Directory Traversal Execution (Metasploit)

Cloudview NMS 2.00b - Writable Directory Traversal Execution Metasploit require 'msf/core' class MetasploitModule "Cloudview NMS 2.00b Writable Directory Traversal Execution", 'Description' = %q This module exploits a vulnerability found in Cloudview NMS server. The software contains a directory...

Cloudview NMS < 2.00b - Arbitrary File Upload Exploit

Exploit for windows platform in category remote exploits require 'msf/core' class MetasploitModule 'Cloudview NMS File Upload', 'Description' = %q This module exploits a file upload vulnerability found within Cloudview NMS 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', '0day' ,...

Cloudview NMS 2.00b - Arbitrary File Upload (Metasploit)

Cloudview NMS 2.00b - Arbitrary File Upload Metasploit require 'msf/core' class MetasploitModule 'Cloudview NMS File Upload', 'Description' = %q This module exploits a file upload vulnerability found within Cloudview NMS 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', '0day' ,...

Cloudview NMS < 2.00b - Arbitrary File Upload (Metasploit)

require 'msf/core' class MetasploitModule 'Cloudview NMS File Upload', 'Description' = %q This module exploits a file upload vulnerability found within Cloudview NMS 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', '0day' , 'DefaultOptions' = 'EXITFUNC' = 'thread', , 'Privileged' =...

CloudView NMS Cross-Site Scripting Vulnerability (CNVD-2017-12302)

CloudView NMS is a network management and monitoring system that automatically discovers, monitors and performs tasks from CloudView NMS USA. A cross-site scripting vulnerability exists in versions of CloudView NMS prior to 2.10a. A remote attacker can exploit this vulnerability to inject arbitra...

CVE-2016-5076

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5076

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5075

CloudView NMS before 2.10a has XSS via a TELNET login...

Design/Logic Flaw

CloudView NMS before 2.10a has XSS via a TELNET login...

Design/Logic Flaw

CloudView NMS before 2.10a has XSS via SNMP...

Format string

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

Information disclosure

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5075

CloudView NMS (before 2.10a) is affected by a Cross-Site Scripting (XSS) vulnerability via a TELNET login. Root cause: XSS in the login flow. Impact as described: vulnerability could allow injection of script/HTML. Affected version: prior to 2.10a; fix likely in 2.10a or later (document implies u...