Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-07544)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting...

pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

pfSense version 2.3.2 suffers from cross site request forgery and cross site scripting vulnerabilities that can assist in gaining a reverse-shell remotely as root. Exploit Title: pfSense 2.3.2 XSS - CSRF-bypass & Reverse-root-shell Date: 01/03/2017 Author: Yann CAM @ASafety / Synetis Vendor or...

Code injection

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash...

CVE-2015-1976

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash...

[SECURITY] Fedora 24 Update: phpMyAdmin-4.6.6-1.fc24

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 24 Update: phpMyAdmin-4.6.5.1-2.fc24

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Eir D1000 Wireless Router - WAN Side Remote Command Injection (Metasploit)

Eir D1000 Wireless Router - WAN Side Remote Command Injection Metasploit =begin Exploit Title: Eir D1000 Wireless Router - WAN Side Remote Command Injection Date: 7th November 2016 Exploit Author: Kenzo Website: https://devicereversing.wordpress.com Tested on Firmware version: 2.00AADU.520150909...

Synology DiskStation Manager (DSM) Web Administration Interface Default Credentials

The web administration interface for the Synology DiskStation Manager DSM application running on the remote host uses a default blank password for the administrator account. A remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc...

[SECURITY] Fedora 24 Update: phpMyAdmin-4.6.4-2.fc24

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance Authenticated Remote Code Execution

The NVRmini 2 Network Video Recorder, Crystal NVR and the ReadyNAS Surveillance application are vulnerable to an authenticated remote code execution on the exposed web administration interface. An administrative account is needed to exploit this vulnerability. This results in code execution as ro...

Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 - Authenticated Remote Root Exploit (Me

Exploit for linux platform in category remote exploits Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 3 Date: 07/28/16 Exploit Author: xort email protected Vendor Homepage: https://www.barracuda.com/ Software Link:...

Barracuda Web Application Firewall 8.0.1.008 - (Authenticated) Remote Command Execution (Metasploit)

Barracuda Web Application Firewall 8.0.1.008 - Authenticated Remote Command Execution Metasploit Exploit Title: Barracuda Web Application Firewall 'Barracuda Web Application Firewall %q This module exploits a remote command execution vulnerability in the Barracuda Web Application Firweall firmwar...

Barracuda Web App Firewall 8.0.1.008Load Balancer 5.4.0.004 - (Authenticated) Remote Command Execution (Metasploit) (3)

Barracuda Web App Firewall 8.0.1.008Load Balancer 5.4.0.004 - Authenticated Remote Command Execution Metasploit 3 Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 3 Date: 07/28/16 Exploit Author: xort [email protected] Vendor Homepage:...

Barracuda Web App Firewall 8.0.1.007Load Balancer 5.4.0.004 - (Authenticated) Remote Command Execution (Metasploit)

Barracuda Web App Firewall 8.0.1.007Load Balancer 5.4.0.004 - Authenticated Remote Command Execution Metasploit Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 2 Date: 07/25/16 Exploit Author: xort [email protected] Vendor Homepage:...

Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - (Authenticated) Remote Command Execution (Metasploit)

Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit 2 Date: 07/25/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/products/loadbalance &...

Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Command Execution (Metasploit)

Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/products/loadbalance &...

Barracuda Spam Virus Firewall 5.1.3.007 - Remote Command Execution (Metasploit)

Barracuda Spam Virus Firewall 5.1.3.007 - Remote Command Execution Metasploit Exploit Title: Barracuda Spam & Virus Firewall Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link:...

Barracuda Spam & Virus Firewall 5.1.3.007 - Remote Command Execution (Metasploit)

Exploit Title: Barracuda Spam & Virus Firewall Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/landing/pages/spamfirewall/ Version: Spam and Virus Firewall 'Barracuda Spam...

Bellini / Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications ''' Bellini/Supercook Wi-Fi Yumi SC200 - Multiple vulnerabilities Reported By: ================================== James McLean - Primary: james dot mclean at gmail dot com Secondary: labs at juicedigital dot net Device Overview:...

Bellini/Supercook Wi-Fi Yumi SC200 Information Disclosure / Code Execution

Bellini/Supercook Wi-Fi Yumi SC200 - Multiple vulnerabilities Reported By: ================================== James McLean - Primary: james dot mclean at gmail dot com Secondary: labs at juicedigital dot net Device Overview: ================================== From...