Cisco Unified Communications Manager CTIManager Vulnerability

A vulnerability in the CTIManager module of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to execute arbitrary commands with elevated privileges. The vulnerability is due to a failure to properly validate input contained within Kerberos single...

Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit

No description provided by source...

McAfee Asset Manager 6.6 - Multiple Vulnerabilities

No description provided by source. Cloud SSO is vuln to unauthed XSS in the authentication audit form: https://twitter.com/BrandonPrry/status/445969380656943104 McAfee Asset Manager v6.6 multiple vulnerabilities http://www.mcafee.com/us/products/asset-manager.aspx Authenticated arbitrary file rea...

[security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04341295 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04341295 Version: 1 HPSBMU03048 rev....

Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit

Exploit for aix platform in category web applications Exploit Title: Plesk SSO XXE injection Old bug Exploit Date: 12 06 2014 Exploit Author: z00 Software Link: http://www.parallels.com/ Version: 11.0.9 10.4.4 Tested on: linux all ?php / ████████████████████████████ █¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█...

Plesk 10.4.411.0.9 - SSO XML External Entity Cross-Site Scripting Injection

Plesk 10.4.411.0.9 - SSO XML External Entity Cross-Site Scripting Injection Exploit Title: Plesk SSO XXE injection Old bug Exploit Date: 12 06 2014 Exploit Author: z00 Software Link: http://www.parallels.com/ Version: 11.0.9 10.4.4 Tested on: linux all ?php / ████████████████████████████ █¶¶¶¶¶¶█...

Plesk 10.4.4/11.0.9 - SSO XML External Entity / Cross-Site Scripting Injection

Exploit Title: Plesk SSO XXE injection Old bug Exploit Date: 12 06 2014 Exploit Author: z00 Software Link: http://www.parallels.com/ Version: 11.0.9 10.4.4 Tested on: linux all ?php / ████████████████████████████ █¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█ █¶¶¶¶¶¶¶¶¶¶█...

CVE-2014-2604

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2014-2604

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2014-2604

CVE-2014-2604 affects HP IceWall SSO 10.0 Dfw and HP IceWall MCRP 2.1/3.0, enabling remote DoS via unspecified vectors. HP’s security bulletin HPSBGN03007 rev.1 documents the vulnerability and lists mitigation steps: disable POST filter function by commenting out POSTFILTER lines in the configura...

PT-2014-4808

Name of the Vulnerable Software and Affected Versions HP IceWall SSO version 10.0 Dfw HP IceWall MCRP versions 2.1 through 3.0 Description The issue allows remote attackers to cause a denial of service via unknown vectors. Recommendations For HP IceWall SSO version 10.0 Dfw, at the moment, there ...

CVE-2014-2604: Undefined Security Weakness

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

HP IceWall Identity Manager / HP IceWall SSO Password Reset Option DoS

DoS related to Apache Commons FileUpload...

[security bulletin] HPSBGN02986 rev.1 - HP IceWall Identity Manager and HP IceWall SSO Password Reset Option Running Apache Commons FileUpload, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04214298 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04214298 Version: 1 HPSBGN02986 rev....

CVE-2014-0348

The CVE is for Artiva Agency Single Sign-On (SSO) where enabling the domain-name option allows login as a domain user using the same Windows username. Affected products: Artiva Workstation 1.3.x prior to 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5. Root cause...

Artiva Agency Single Sign-On (SSO) feature vulnerability

Overview Artiva Agency Single Sign-On SSO feature checks only the local Windows login name which could allow an attacker to impersonate another Artiva Agency user. Description Artiva Agency Single Sign-On SSO feature when configured with the domain name option allows the currently logged on Windo...

Design/Logic Flaw

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors...

CVE-2014-2600

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors...

PT-2014-4804

Name of the Vulnerable Software and Affected Versions HP IceWall Identity Manager versions 4.0 through 4.0 SP1 HP IceWall Identity Manager version 5.0 HP IceWall SSO version 10.0 Description The issue affects HP IceWall Identity Manager and HP IceWall SSO when Apache Commons FileUpload is used,...