pmp-architekten.de XSS vulnerability

Open Bug Bounty ID: OBB-674993 Description| Value ---|--- Affected Website:| pmp-architekten.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bestcareerleap.com XSS vulnerability

Open Bug Bounty ID: OBB-293866 Description| Value ---|--- Affected Website:| bestcareerleap.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-5459

Summary: CVE-2015-5459 affects ManageEngine Password Manager Pro (PMP) prior to 8.1 Build 8101. The vulnerability resides in the AdvanceSearch.class within AdventNetPassTrix.jar and is a SQL injection via the ANDOR parameter, enabling remote authenticated users to execute arbitrary SQL commands (...

SOL16843 - NAT-PMP vulnerability VU#184540

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

MediaCoder-PMP-Edition-0.8.17---(.m3u)

Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH Download link: http://www.mediacoderhq.com/device/mpx.htm Vulnerable Product: MediaCoder Personal Media Player Edition Date found: 21.06.2013 Date publish: 21.06.2013 from struct import pack junk = "http://" + "\x41" 765 nse...

CVE-2014-9372

CVE-2014-9372 is a vulnerability in ManageEngine Password Manager Pro (PMP) specifically in the UploadAccountActivities servlet . The issue is a directory traversal caused by insufficient sanitization of a filename containing "..", allowing remote attackers to delete arbitrary files on the affect...

NAT-PMP Protocol vulnerability 1 2 0 0 million routers at risk-vulnerability and early warning-the black bar safety net

Present in the embedded device vulnerability, especially the kind of small office and home office route, is never a steady stream. This week security researchers discovered a serious vulnerability, because theNAT-PMP Protocol improper design will affect more than 1 2 0 0 million of the router...

NAT-PMP Security Vulnerability Affects 1.2M Routers

Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...

Incorrect implementation of NAT-PMP in multiple devices

Overview Many NAT-PMP devices are incorrectly configured, allowing them to field requests received on external network interfaces or map forwarding routes to addresses other than that of the requesting host, making them potentially vulnerable to information disclosure and malicious port mapping...

MediaCoder PMP Edition 0.8.17 (.m3u) - Buffer Overflow Exploit

No description provided by source. print +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder:...

NAT-PMP Detection (local network)

The remote device has the NAT-PMP protocol enabled. This protocol allows any application on the local subnet to request port mappings from the outside to the inside. Make sure the use of this service is done in accordance to your security policy. Letting any application create dynamic mappings is...

NAT-PMP Detection (remote network)

The remote device has the NAT-PMP protocol enabled. This protocol may allow any application on an internal subnet to request port mappings from the outside to the inside. If this service is reachable from the outside your network, it may allow a remote attacker to gain more information about your...

MediaCoder PMP Edition 0.8.17 Buffer Overflow Vulnerability

MediaCoder PMP Edition version 0.8.17 buffer overflow exploit that generates a malicious .m3u file. print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player...

MediaCoder PMP Edition 0.8.17 Buffer Overflow

print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder: metacom +RST +Tested on: Windows...

NAT-PMP External Address Scanner

Scan NAT devices for their external address using NAT-PMP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NAT-PMP External Address Scanner', 'Description' = 'Scan NAT devices for their external...

nat-pmp-mapport NSE Script

Maps a WAN port on the router to a local port on the client using the NAT Port Mapping Protocol NAT-PMP. It supports the following operations: map - maps a new external port on the router to an internal port of the requesting IP unmap - unmaps a previously mapped port for the requesting IP unmapa...

Nmap NSE net: nat-pmp-info

Queries a NAT-PMP service for its external address. OpenVAS Vulnerability Test $Id: gbnmapnatpmpinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.o...

Nmap NSE net: nat-pmp-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4387

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

PT-2007-6210 · Phpmyadmin · Phpmyprofiler

Name of the Vulnerable Software and Affected Versions: phpmyProfiler version 0.9.6b Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pmp rel path parameter in the include/plugin/block.t.php file. This is due to a remote file inclusion vulnerability. No...