10772 matches found
Manage Engine Exchange Reporter Plus - Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Manage Engine Exchange Reporter Plus Unauthenticated RCE', 'Description' = %q This module exploits a remote code execution vulnerability that...
Manage Engine Exchange Reporter Plus Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Manage Engine Exchange Reporter Plus Unauthenticated RCE', 'Description' = %q This module exploits a remote code execution vulnerability that...
ManageEngine Exchange Reporter Plus Detection (HTTP)
HTTP based detection of ManageEngine Exchange Reporter Plus. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ManageEngine Exchange Reporter Plus < Build 5311 - Remote Code Execution Exploit
ManageEngine Exchange Reporter Plus versions 5310 and below suffer from a remote code execution vulnerability. Exploit Title: ManageEngine Exchange Reporter Plus = 5310 Unauthenticated RCE Date: 28-06-2018 Software Link: https://www.manageengine.com/products/exchange-reports/ Exploit Author: Kacp...
ManageEngine Exchange Reporter Plus < Build 5311 - Remote Code Execution
Exploit Title: ManageEngine Exchange Reporter Plus = 5310 Unauthenticated RCE Date: 28-06-2018 Software Link: https://www.manageengine.com/products/exchange-reports/ Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ YouTube:...
plus-music.com XSS vulnerability
Open Bug Bounty ID: OBB-638633 Description| Value ---|--- Affected Website:| plus-music.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ManageEngine Exchange Reporter Plus Unauthenticated RCE
This module exploits a remote code execution vulnerability that exists in Exchange Reporter Plus use exploit/windows/http/manageengine/adshaclusterrce msf undefinedadshaclusterrce show actions ...actions... msf undefinedadshaclusterrce set ACTION msf undefinedadshaclusterrce show options ...show...
plus-msk.ru XSS vulnerability
Open Bug Bounty ID: OBB-634465 Description| Value ---|--- Affected Website:| plus-msk.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Open Graph for Facebook, Google+ and Twitter Card Tags <= 2.2.4 - Authenticated Reflected XSS
There is a reflected XSS vulnerability caused by "Open Graph for Facebook, Google+ and Twitter Card Tags" in the wdfbogerror parameter on a GET request when editing a post. This can be exploited by tricking an authenticated Wordpress administrator into clicking a malicious link. This vulnerabilit...
Security Bulletin: Apache Commons FileUpload vulnerability affects IBM Spectrum Protect Plus (CVE-2016-1000031)
Summary A vulnerability in Apache Commons FileUpload affects IBM Spectrum Protect™ Plus. This vulnerability could allow an attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2016-1000031 DESCRIPTION: Apache Commons FileUpload, as used in Novell NetIQ Sentinel and...
Security Bulletin: IBM Spectrum Protect Plus has released instructions for obtaining an update in response to the vulnerabilities known as Spectre and Meltdown
Summary IBM has released the instructions in response to CVE-2017-5715, CVE-2017-5753, and CVE-2017-5754. These vulnerabilities are known as Spectre and Meltdown. Vulnerability Details CVEID: CVE-2017-5715 CVEID: CVE-2017-5753 CVEID: CVE-2017-5754 Affected Products and Versions IBM Spectrum Prote...
notepad-plus-plus.org XSS vulnerability
Open Bug Bounty ID: OBB-633166 Description| Value ---|--- Affected Website:| notepad-plus-plus.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress Yakadanda Google+ Hangout Events Plugin Cross-Site Scripting Vulnerability
WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports the hosting of personal blog sites on servers running PHP and MySQL.Yakadanda Google+ Hangout Events is one of the widgets that will generate the associated Google+ Hangou...
Huawei Patches Four Server Bugs Rated High Severity
Huawei Technologies warned customers of four vulnerabilities rated high that impact 20 of its server models. Patches are available for each of the bugs that range from an authentication bypass vulnerability, privilege escalation vulnerability and two JavaScript Object Notation JSON injection...
ManageEngine ADAudit Plus Detection (HTTP)
HTTP based detection of ManageEngine ADAudit Plus. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zoho ManageEngine ADAudit Plus SQL Injection Vulnerability
ZOHO ManageEngine ADAudit Plus is a window Active Directory real-time auditing system from ZOHO USA. The system is capable of monitoring or auditing critical resources such as domain controllers in a network in real time. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus prio...
CVE-2018-10466
Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection...
CVE-2018-10466
Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection...
