199 matches found
CVE-2015-2904
Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface...
PT-2015-5965
Name of the Vulnerable Software and Affected Versions Actiontec GT784WN modems with firmware before NCS01-1.0.13 Description The issue allows remote attackers to obtain root access by connecting to the web administration interface due to hardcoded credentials. Recommendations For Actiontec GT784W...
CVE-2015-2904: Undefined Security Weakness
Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface...
PT-2015-3185
Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions 6.5.x.x through 7.1.1.x before 7.1.1.5 EMC Isilon OneFS versions 7.2.0.x before 7.2.0.2 Description The issue is related to the lack of input sanitization in the web administration interface of the Isilon OneFS...
PT-2015-4841
Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions prior to 7.0.241 Cisco Wireless LAN Controller WLC versions 7.1.x through 7.4.x before 7.4.122 Cisco Wireless LAN Controller WLC versions 7.5.x and 7.6.x before 7.6.120 Description A vulnerability in...
Barracuda Firmware 5.0.0.012 - (Authenticated) Remote Command Execution (Metasploit)
Barracuda Firmware 5.0.0.012 - Authenticated Remote Command Execution Metasploit Exploit Title: Barracuda Firmware 'Barracuda Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Firmware Version 'xort', metasploit module , 'Version' = '$Revision: 12345 $',...
Barracuda Firmware <= 5.0.0.012 reporting Post Auth Remote Root Exploit
This Metasploit module exploits a remote command execution vulnerability in Barracuda Firmware versions 5.0.0.012 and below by exploiting a vulnerability in the web administration interface. By sending a specially crafted request it's possible to inject system commands while escalating to root do...
ManageEngine NetFlow Analyzer Default Credentials
The remote ManageEngine NetFlow Analyzer web administration interface uses a known set of default credentials. An attacker can use these to gain access to the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Fortinet FortiWeb CSRF Vulnerability (FG-IR-14-013)
Fortinet FortiWeb is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2014-7851
Name of the Vulnerable Software and Affected Versions LG Electronics Mobile WiFi router versions L-09C, L-03E, and L-04D Description The issue allows remote attackers to obtain sensitive information via unspecified vectors due to a lack of access restriction to the web administration interface...
ManageEngine EventLog Analyzer Default Credentials
The remote ManageEngine EventLog Analyzer web administration interface uses a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid77479; scriptversion"1.5";...
3Com Wireless 8760 Dual-Radio 11a/b/g PoE Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues...
Cacheflow CacheOS 3.1/4.0 Web Administration Arbitrary Cached Page Code Leakage Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3841/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. When a user connects to the system via the web administration interface on port...
D-Link DSL-500T / DAP 1150 / DAP-1320 multiple security vulnerabilities
Web administration interface crossite request forgery, authentication bypass, directory traversal...
PT-2014-3564
Name of the Vulnerable Software and Affected Versions FortiADC versions prior to 3.2.1 Description A cross-site scripting XSS issue exists in the web administration interface, allowing remote attackers to inject arbitrary web script or HTML via the locale parameter to the "gui partA/" endpoint...
PT-2014-4193
Name of the Vulnerable Software and Affected Versions FortiGuard FortiWeb versions 5.0.3 and earlier Description A cross-site scripting XSS issue exists in the web administration interface, allowing remote authenticated administrators to inject arbitrary web script or HTML. Recommendations For...
CVE-2014-1458: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...
HP Intelligent Management Center Web Administration Interface Detection
Binary data hpimcwebinterfacedetect.nbin...
SonicWall Email Security crossite scripting
Crossite scripting in Web administration interface...
Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]
Overview =============== Cerberus FTP Server http://www.cerberusftp.com/ is a secure and reliable FTP server with many features and available functionality. It was discovered that the Web Administration interface has multiple persistent Cross Site Scripting XSS vulnerabilities. In the log viewer...