DEBIAN-CVE-2014-9403

The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to cause a denial of service NULL pointer dereference and crash by adding a channel with the same name as an existing channel but without the leading character, related to a...

LG Electronics mobile access routers lack access restrictions

Overview LG Electronics mobile access routers provided by NTT DOCOMO, INC. lack access restrictions in the web administration interface. Taiga Asano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attacke...

CVE-2014-0152

Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2014-0152

Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2014-0152

CVE-2014-0152 affects oVirt Web Admin Interface (3.4.0 and earlier). Root cause: after authentication, a new session ID is not generated and session IDs may be stored in HTML5 local storage, not protected by same-origin policy. This enables a remote attacker to hijack a logged-in user’s session v...

PT-2014-3504 · Ovirt · Ovirt

Name of the Vulnerable Software and Affected Versions: oVirt versions 3.4.0 and earlier Description: A session fixation issue in the web admin interface allows remote attackers to hijack web sessions. Recommendations: For versions 3.4.0 and earlier, update to a version later than 3.4.0 to resolve...

McAfee Email Gateway - Web Administration Broken Access Control

No description provided by source...

CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability

No description provided by source. CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:MAXSITE + Exploit...

ovirt-engine-webadmin: session fixation

Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

Quantum vmPRO Web Administration Interface Detection

Binary data quantumvmprodetect.nbin...

Cisco WAAS Mobile Server Web Administration Interface Detection

Binary data ciscowaasmobilehttpdetect.nbin...

web_admin_tools /yb/yb.php 代码执行漏洞

No description provided by source...

MongoDB Web Interface Detection

The remote web server is running the MongoDB Web Admin Interface. This interface lists information of interest to administrators of MongoDB, a document-oriented database system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65915; scriptversion"1.6";...

Cyberoam Admin Console Detection

Cyberoam UTM's web admin console is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61446; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/14"; scriptnameenglish:"Cyberoam Admin Console Detection";...

Edimax IC-3030iWn - UDP Packet Password Information Disclosure

Edimax IC-3030iWn - UDP Packet Password Information Disclosure source: https://www.securityfocus.com/bid/54006/info Edimax IC-3030iWn is prone to an information-disclosure vulnerability. Successful exploits will allow a remote attacker to gain access to sensitive information. Information obtained...

Edimax IC-3030iWn Web Admin Auth Bypass exploit

Exploit for hardware platform in category web applications This exploit against: - Edimax IC-3030i - Edimax IC-3015 - Airlive WN 500 !/usr/bin/env python """ Exploit Title: Edimax IC-3030iWn Web Admin Auth Bypass exploit Date: 4 April 2012 Exploit Author: email protected, @y3dips URL:...

Edimax IC-3030iWn Authentication Bypass

!/usr/bin/env python """ Exploit Title: Edimax IC-3030iWn Web Admin Auth Bypass exploit Date: 4 April 2012 Exploit Author: [email protected], @y3dips URL: http://echo.or.id Vendor Homepage: http://www.edimax.com Sourcecode Link: http://www.edimax.com/en/producedetail.php?pdid=352&pl1id=8&pl2id=91...

IBM Tivoli Directory Server Web Admin tool 6.1.0.x < 6.1.0.48 / 6.2.0.x < 6.2.0.22 / 6.3.0.x < 6.3.0.11 Cross-Site Scripting Vulnerability

Binary data 6478.prm...

CVE-2012-0740

Cross-site scripting XSS vulnerability in the Web Admin Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...