CVE-2017-12251

A vulnerability in the web console of the Cisco Cloud Services Platform CSP 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines VMs operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation o...

Cisco Cloud Services Platform Unauthorized Access Vulnerability

Cloud Services Platform 2100 is a unified and optimized x86 software and hardware platform for virtualizing data center network functions. The Cisco Cloud Services Platform CSP 2100 operates with a security vulnerability in the implementation of the Web console that could allow an authenticated,...

Cisco Cloud Services Platform 2100 Unauthorized Access Vulnerability

A vulnerability in the web console of the Cisco Cloud Services Platform CSP 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines VMs operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation o...

Apache ActiveMQ Web Console Default / No Credentials (HTTP)

The Apache ActiveMQ Web Console is unprotected or is using default credentials. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

Unrestricted file upload

Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file...

Hawtio Cross-Site Request Forgery Vulnerability

Hawtio is a Web console for managing Java frameworks. A cross-site request forgery vulnerability exists in Hawtio. A remote attacker could exploit this vulnerability to perform unauthorized operations...

CVE-2017-10062

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10119

CVE-2017-10119 affects Oracle Fusion Middleware Oracle Service Bus (OSB) Web Console Design, Admin subcomponent, specifically version 11.1.1.9.0. The vulnerability allows a low-privilege, network-accessing attacker (via HTTP) to compromise OSB; successful exploitation requires user interaction. I...

CVE-2017-10062

CVE-2017-10062 affects the Solaris component of Oracle Sun Systems Suite, specifically the Oracle Java Web Console subcomponent. The vulnerability is in Solaris 10 (x86 and SPARC) and allows a low-privilege attacker with logon to the system to compromise Solaris, leading to unauthorized updates/d...

Trend Micro OfficeScan Proxy Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro OfficeScan. Authentication is required to exploit this vulnerability. The specific flaw exists within the Web Console, which listens on TCP port 4343 by default. When parsing the T...

DiskBoss Enterprise 8.2.14 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: DiskBoss Enterprise v8.2.14 Remote buffer overflow Date: 2017-07-30 Exploit Author: Ahmad Mahfouz Author Homepage: www.unixawy.com Vendor Homepage: http://www.diskboss.com/ Software Link:...

Oracle Solaris Unauthorized Read Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Oracle Java Web Console subcomponent of the Solaris component version 10 of the Oracle Sun Systems Products Suite....

Unspecified Vulnerability in Oracle Service Bus

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Oracle Service Bus is one of the components that supports the interaction between managed...

NagaScan - Distributed Passive Scanner for Web Application

What is NagaScan NagaScan is a distributed passive vulnerability scanner for Web application. What NagaScan do NagaScan currently support some common Web application vulnerabilities, e.g. XSS, SQL Injection, File Inclusion etc How NagaScan work Config a proxy, e.g. Web Browser proxy or mobile Wi-...

Lepide Auditor Suite - createdb() Web Console Database Injection Remote Code Execution Exploit

Exploit for php platform in category remote exploits !/usr/bin/python """ Lepide Auditor Suite createdb Web Console Database Injection Remote Code Execution Vulnerability Vendor: http://www.lepide.com/ File: lepideauditorsuite.zip SHA1: 3c003200408add04308c04e3e0ae03b7774e4120 Download:...

Lepide Auditor Suite - createdb() Web Console Database Injection Remote Code Execution

Lepide Auditor Suite - createdb Web Console Database Injection Remote Code Execution !/usr/bin/python """ Lepide Auditor Suite createdb Web Console Database Injection Remote Code Execution Vulnerability Vendor: http://www.lepide.com/ File: lepideauditorsuite.zip SHA1:...

Lepide Auditor Suite - 'createdb()' Web Console Database Injection / Remote Code Execution

!/usr/bin/python """ Lepide Auditor Suite createdb Web Console Database Injection Remote Code Execution Vulnerability Vendor: http://www.lepide.com/ File: lepideauditorsuite.zip SHA1: 3c003200408add04308c04e3e0ae03b7774e4120 Download: http://www.lepide.com/lepideauditor/download.html Analysis:...

The vulnerability of the Antivirus Kasperksy 8.0 web console for Linux File Servers allows an attacker to send commands to the antivirus software on behalf of its user.

The vulnerability of the Antivirus Kaspersky 8.0 web console for Linux File Servers arises from the lack of authenticity verification for the creators of the web consoles. Exploiting this vulnerability allows a malicious actor to send an antivirus command on behalf of the user who visits the...