Microsoft ASP.NET Information Disclosure Vulnerability

Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. An information disclosure vulnerability exists in Microsoft ASP.NET. On systems with the customErrors configuration disabled, ASP.NET errors when processing requests for certain...

Microsoft Windows .NET Framework Information Disclosure Vulnerability (3048010)

This host is missing an important security update according to Microsoft Bulletin MS15-041. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SureCom EP-9510AX/EP-4504AX Network Device Malformed Web Authorization Request Denial of Service Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service...

VocalTec VGW4/8 Telephony Gateway Remote Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9876/info It has been reported that the VGW4/8 Telephony Gateway is prone to a remote authentication bypass vulnerability via its web configuration tool. The problem is due to a design error in the application that allows...

F5 Networks BIG-IQ Configuration Utility Privilege Escalation

According to its version number, the remote F5 Networks BIG-IQ device is affected by a privilege escalation vulnerability that allows remote, authenticated users to change the password of other users such as the default 'root' user via a specially crafted request to the web configuration utility...

Silex USB Device Server Web Configuration Page Empty Password

The Web Configuration Page of the remote Silex USB Device Server uses an empty password to manage the device. Knowing this, an attacker with access to the web server can gain administrative access to the device. Note that the device's Web Configuration Page uses host-based authentication. If a...

Cisco Device Web Configuration Detection (Web Server)

Binary data 6836.prm...

CVE-2012-1513

The Web Configuration tool in VMware vCenter Orchestrator vCO 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document...

CVE-2012-1513

CVE-2012-1513 refers to a vulnerability in the VMware vCenter Orchestrator (vCO) Web Configuration tool where the vCenter Server password is reflected back in an HTML page. This leads to potential information disclosure for remote authenticated administrators who read the page. Affected products/...

CVE-2012-1513: Exposure of Sensitive Information to an Unauthorized Actor

The Web Configuration tool in VMware vCenter Orchestrator vCO 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document...

PT-2012-3319

Name of the Vulnerable Software and Affected Versions vCenter Orchestrator versions 4.0 through 4.0 Update 3 vCenter Orchestrator versions 4.1 through 4.1 Update 1 vCenter Orchestrator versions 4.2 through 4.2 Update 0 Description The issue allows remote authenticated administrators to obtain...

Siemens Scalance S Multiple Security Vulnerabilities

Overview ICS-CERT has received a report from Siemens regarding two security vulnerabilities in the Scalance S Security Module firewall. This vulnerability was reported to Siemens by Adam Hahn and Manimaran Govindarasu for coordinated disclosure. The first issue is a brute-force credential guessin...

Set sail communication corporate website CMS system v1. 1 0day-vulnerability warning-the black bar safety net

This is a broken system, take home the source the horse change it that is their own, also charges Garbage system, but also on the source the horse is encrypted. Vulnerability is a heap of Background login authentication file: !-- include file="conn. asp" - !-- include file="../class/Config. asp" ...

PT-2011-2925 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A regression in a previous fix caused security constraints to be ignored under certain conditions. Specifically, this occurred when there was no login...

Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ============================================================== Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability ============================================================== Xerver HTTP Server = v4.32 Remote Denial of Service Found...

Xerver HTTP Server 4.32 - Remote Denial of Service

Xerver HTTP Server 4.32 - Remote Denial of Service Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application...

CVE-2008-6540

DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default 1 ValidationKey and 2 DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restrictions by using the default keys...

CVE-2003-1427

Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded %2e%2e%2f ../ dot dot slash in the port parameter...

CVE-2003-1427

Affected product: Netgear FM114P (firmware 1.4) web configuration interface. Vulnerability: Directory traversal via a hex-encoded (../../ )../ in the port parameter, allowing remote attackers to read arbitrary files (e.g., netgear.cfg). Root cause: Insufficient validation of the port parameter en...

CVE-2003-1427: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded %2e%2e%2f ../ dot dot slash in the port parameter...