426 matches found
NETASQ Firewall - UTM suffer from bypassing metacharacters filter
Exploit for php platform in category web applications Aswome coolkaveh look what I found ----------------------------------------------------------------------------------------------------- Title: NETASQ Firewall - UTM suffer from bypassing metacharacters filter Date : 2012-07-27 coolkaveh...
CVE-2012-3372
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...
Default configuration
DISPUTED The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLC...
CVE-2012-3372
CVE-2012-3372 affects Cyberoam UTM/DPI devices. The default configuration uses the same Certification Authority certificate and private key across different customers, enabling a MITM attacker to spoof SSL servers by leveraging the Cyberoam_SSL_CA trusted root. Several sources note the vendor dis...
CVE-2012-3372
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...
CVE-2012-3372
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...
WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversal
This module exploits the WANGKONGBAO CNS-1000 and 1100 UTM appliances aka Network Security Platform. This directory traversal vulnerability is interesting because the apache server is running as root, this means we can grab anything we want! For instance, the /etc/shadow and /etc/passwd files for...
VulnCheck KEV: CVE-2012-3372
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...
WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal
Exploit for hardware platform in category web applications Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue ...
WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the /src/acloglogin.php langid and lang parameters...
WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal Metasploit Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The...
Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities
Document Title: =============== Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=586 Release Date: ============= 2012-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 586...
Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities
Document Title: =============== Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=586 Release Date: ============= 2012-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 586...
Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities
Document Title: =============== Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=569 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 569...
Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities
Document Title: =============== Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=569 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 569...
Cyberoam Unified Threat Management security vulnerabilities
Command execution, information leakage...
Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities
Title: ====== Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Date: ===== 2012-04-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=498 VL-ID: ===== 498 Introduction: ============= Cyberoam Unified Threat Management appliances offer comprehensive securit...
Cyberoam UTM 10.01.2 Build 059 Local File Inclusion
Title: ====== Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Date: ===== 2012-04-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=498 VL-ID: ===== 498 Introduction: ============= Cyberoam Unified Threat Management appliances offer comprehensive securit...
Cyberoam UTM v10.01.2 b59 - File Include Vulnerabilities
Document Title: =============== Cyberoam UTM v10.01.2 b59 - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=498 Release Date: ============= 2012-04-14 Vulnerability Laboratory ID VL-ID: ==================================== 49...
Cyberoam UTM 10.01.2 build 059 File Include Vulnerabilities
Exploit for multiple platform in category web applications Title: ====== Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Introduction: ============= Cyberoam Unified Threat Management appliances offer comprehensive security to organizations, ranging from large enterprises to small...