The vulnerability of the application configuration for managing servers using CentOS Web Panel allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the application configuration for CentOS Web Panel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by modifying the administrator’s email address...

Lenovo XClarity Controller CSV Injection Vulnerability

Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo, China, that is used to standardize and automate basic server management tasks. A CSV injection vulnerability exists in Lenovo XClarity Controller. An attacker can exploit this vulnerability to execute arbitrary cod...

cPanel Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-36117)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A vulnerability exists in cPanel for privilege permission and access control issues. Detailed vulnerability details are not...

CVE-2019-14838

The CVE-2019-14838 entry concerns WildFly (wildfly-core) prior to 7.2.5.GA, where Management users bearing Monitor, Auditor, or Deployer roles could modify the server’s runtime state due to an authorization misconfiguration. The issue is tied to WildFly/JBoss components, with multiple advisories ...

CVE-2019-1376: Improper Handling of Exceptional Conditions

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313...

CVE-2019-1313: Improper Handling of Exceptional Conditions

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376...

PT-2019-3646

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description An information disclosure issue exists due to improper permission enforcement. This could allow a remote attacker to access protected information. Recommendatio...

PT-2019-3644

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Management Studio affected versions not specified Description The issue is related to an information disclosure problem in Microsoft SQL Server Management Studio. It occurs due to improper permission enforcement, which cou...

Microsoft SQL Server Management Studio CVE-2019-1376 Information Disclosure Vulnerability

Description Microsoft SQL Server Management Studio is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SQL Server Management Studio 18.3.1 Recommendations Block...

The vulnerability of the server management application for CentOS Web Panel stems from deficiencies in access control. This allows attackers to delete any databases on the servers.

The vulnerability of the CentOS Web Panel administration application is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete any databases on the servers remotely...

New HTTP/2 vulnerability exposure, allowing hackers to exploit an unpatched server to trigger a DoS attack-vulnerability warning-the black bar safety net

According to foreign media reports, recently, security researchers disclosed a HTTP/2 Protocol the eight vulnerabilities, allowing hackers to use to support HTTP/2 communication is not to patch the server to trigger a denial of Service DoS attack is. It is reported that these vulnerabilities allo...

The vulnerability of Windows Admin Center’s server management tool, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Windows Admin Center server management tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

File upload vulnerability in QCMS web management system ca***.php

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in the QCMS website management system ca.php, which can be exploited by an attacker to gain control of the web server...

The vulnerability of the WkbProgramLow function in the WibuKey Network Server Management security tool allows a hacker to trigger a service failure.

The vulnerability of the WibuKey Network Server Management security software in the WkbProgramLow function is related to buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions and potentially execute arbitrary code, using specially crafted...

CVE-2018-3991

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigg...

CVE-2018-3991

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigg...

PT-2019-1399

Name of the Vulnerable Software and Affected Versions WibuKey Network Server Management version 6.40.2402.500 Description The issue is related to a heap overflow vulnerability in the WkbProgramLow function. This can be exploited by sending specially crafted TCP packets, potentially leading to...

The vulnerability of Microsoft SQL Server Management Studio, related to errors in restricting XML references to external objects (XXE), allows attackers to disclose sensitive information.

The vulnerability of Microsoft SQL Server Management Studio is related to errors in restricting XML references to external objects XXE. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using a specially crafted file...

Microsoft SQL Server Management Studio 17.9 - XML External Entity Injection

Microsoft SQL Server Management Studio 17.9 - XML External Entity Injection Exploit Title: Microsoft SQL Server Management Studio 17.9 - XML External Entity Injection Date: 2018-10-10 Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Venodor: www.microsoft.com Software: SQL Server...

Microsoft SQL Server Management Studio 17.9 / 18.0 Preview 4 XML Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-SQL-SERVER-MGMT-STUDIO-XEL-FILETYPE-XML-INJECTION-CVE-2018-8527.txt + ISR: ApparitionSec + Zero Day Initiative Program Vendor www.microsoft.com Product SQL Server...