Cisco Unified Communications Manager CTIManager Vulnerability

A vulnerability in the CTIManager module of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to execute arbitrary commands with elevated privileges. The vulnerability is due to a failure to properly validate input contained within Kerberos single...

Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit

No description provided by source...

McAfee Asset Manager 6.6 - Multiple Vulnerabilities

No description provided by source. Cloud SSO is vuln to unauthed XSS in the authentication audit form: https://twitter.com/BrandonPrry/status/445969380656943104 McAfee Asset Manager v6.6 multiple vulnerabilities http://www.mcafee.com/us/products/asset-manager.aspx Authenticated arbitrary file rea...

[security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04341295 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04341295 Version: 1 HPSBMU03048 rev....

Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit

Exploit for aix platform in category web applications Exploit Title: Plesk SSO XXE injection Old bug Exploit Date: 12 06 2014 Exploit Author: z00 Software Link: http://www.parallels.com/ Version: 11.0.9 10.4.4 Tested on: linux all ?php / ████████████████████████████ █¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█...

Plesk 10.4.4/11.0.9 - SSO XML External Entity / Cross-Site Scripting Injection

Exploit Title: Plesk SSO XXE injection Old bug Exploit Date: 12 06 2014 Exploit Author: z00 Software Link: http://www.parallels.com/ Version: 11.0.9 10.4.4 Tested on: linux all ?php / ████████████████████████████ █¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█...

Plesk 10.4.411.0.9 - SSO XML External Entity Cross-Site Scripting Injection

Plesk 10.4.411.0.9 - SSO XML External Entity Cross-Site Scripting Injection Exploit Title: Plesk SSO XXE injection Old bug Exploit Date: 12 06 2014 Exploit Author: z00 Software Link: http://www.parallels.com/ Version: 11.0.9 10.4.4 Tested on: linux all ?php / ████████████████████████████ █¶¶¶¶¶¶█...

CVE-2014-2604

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2014-2604

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2014-2604

CVE-2014-2604 affects HP IceWall SSO 10.0 Dfw and HP IceWall MCRP 2.1/3.0, enabling remote DoS via unspecified vectors. HP’s security bulletin HPSBGN03007 rev.1 documents the vulnerability and lists mitigation steps: disable POST filter function by commenting out POSTFILTER lines in the configura...

[security bulletin] HPSBGN02986 rev.1 - HP IceWall Identity Manager and HP IceWall SSO Password Reset Option Running Apache Commons FileUpload, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04214298 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04214298 Version: 1 HPSBGN02986 rev....

HP IceWall Identity Manager / HP IceWall SSO Password Reset Option DoS

DoS related to Apache Commons FileUpload...

CVE-2014-0348

The CVE is for Artiva Agency Single Sign-On (SSO) where enabling the domain-name option allows login as a domain user using the same Windows username. Affected products: Artiva Workstation 1.3.x prior to 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5. Root cause...

Artiva Agency Single Sign-On (SSO) feature vulnerability

Overview Artiva Agency Single Sign-On SSO feature checks only the local Windows login name which could allow an attacker to impersonate another Artiva Agency user. Description Artiva Agency Single Sign-On SSO feature when configured with the domain name option allows the currently logged on Windo...

CVE-2014-2600

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors...

CVE-2014-2586

Cross-site scripting XSS vulnerability in the login audit form in McAfee Cloud Single Sign On SSO allows remote attackers to inject arbitrary web script or HTML via a crafted password...

CVE-2014-2586

CVE-2014-2586 describes a Cross-site scripting (XSS) vulnerability in the login audit form of McAfee Cloud Single Sign On (SSO) . The flaw allows a remote attacker to inject arbitrary web script or HTML via a crafted password. Some sources imply the impact could include access to sensitive user i...

McAfee Asset Manager 6.6 - Multiple Vulnerabilities

McAfee Asset Manager 6.6 - Multiple Vulnerabilities Cloud SSO is vuln to unauthed XSS in the authentication audit form: https://twitter.com/BrandonPrry/status/445969380656943104 McAfee Asset Manager v6.6 multiple vulnerabilities http://www.mcafee.com/us/products/asset-manager.aspx Authenticated...