246 matches found
EUVD-2017-7800
Malware in sbrugna...
EUVD-2017-7786
Malware in sbrugna...
EUVD-2017-7792
Malware in sbrugna...
EUVD-2017-7783
Malware in sbrugna...
EUVD-2017-7791
Malware in sbrugna...
NetGain Systems Enterprise Manager Insecure Deserialization (CVE-2017-17406)
An insecure deserialization vulnerability exists in the NetGain Systems Enterprise Manager. The vulnerability is due to the lack of input validation on objects in the RMI Registry before deserializing them. Successful exploitation can result in arbitrary code execution on the affected system...
VulnCheck KEV: CVE-2017-16608
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...
VulnCheck KEV: CVE-2017-16602
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
NetGain EM Plus 10.1.68 - Remote Command Execution
/ Exploit Title: NetGain EM Plus = v10.1.68 - Unauthorized Local File Inclusion Date: 15 September 2019 Exploit Author: azams / @TheRealAzams Vendor Homepage: http://netgain-systems.com Software Link: http://www.netgain-systems.com/free/ Version: v10.1.68 Tested on: Linux Install golang:...
NetGain Enterprise Manager Cross-Site Scripting Vulnerability
NetGain Enterprise Manager EM is a plug-and-play hardware IT infrastructure monitoring and management appliance developed by NetGain Systems. A stored cross-site scripting vulnerability exists in NetGain Enterprise Manager EM before 10.1.12, which can be exploited by remote attackers to execute...
NetGain Enterprise Manager OS Command Injection Vulnerability
NetGain Enterprise Manager EM is a plug-and-play hardware IT infrastructure monitoring and management appliance developed by NetGain Systems. NetGain Enterprise Manager EM before 10.0.57 suffers from an OS command injection vulnerability that can be exploited by a remote authenticated attacker to...
Cross site scripting
NetGain Enterprise Manager EM is affected by multiple Stored Cross-Site Scripting XSS vulnerabilities in versions before 10.1.12...
CVE-2018-10586
NetGain Enterprise Manager EM is affected by multiple Stored Cross-Site Scripting XSS vulnerabilities in versions before 10.1.12...
CVE-2018-10587
NetGain Enterprise Manager EM is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution...
CVE-2018-10587
NetGain Enterprise Manager EM is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution...
CVE-2018-10586
NetGain Enterprise Manager EM is affected by multiple Stored Cross-Site Scripting XSS vulnerabilities in versions before 10.1.12...
Command injection
NetGain Enterprise Manager EM is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution...
CVE-2018-10586
Product: NetGain Enterprise Manager (EM). Vulnerability: Stored Cross-Site Scripting (XSS) affecting EM prior to version 10.1.12. The CNVD/NVD entries confirm multiple stored XSS vulnerabilities in EM, allowing remote attackers to execute arbitrary script code or access sensitive browser-based in...
CVE-2018-10587
CVE-2018-10587 affects NetGain Enterprise Manager (EM) prior to version 10.0.57. The connected sources confirm an OS command injection vulnerability that can be exploited by a remote authenticated attacker to inject arbitrary code, resulting in remote code execution. The issue is documented acros...
