4525 matches found
Cisco Firepower Management Center 跨站脚本漏洞
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center that stems from insufficient validation of user-supplied input in the web management interface, allowing an...
PT-2023-7569 · Cisco · Cisco Identity Services Engine
Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to unlimited file upload of dangerous types. An attacker with valid Administrator credentials could exploit this by uploading a crafted file ...
Exploit for Classic Buffer Overflow in Draytek Vigor3910_Firmware
CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code exe...
CVE-2023-43508
Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of these vulnerabilities allow an attacker to...
PT-2023-28851 · Aruba Networks · Clearpass Policy Manager
Name of the Vulnerable Software and Affected Versions: Aruba Networks ClearPass Policy Manager affected versions not specified Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change...
Cisco Multiple Product Security Vulnerabilities
Cisco Unity Connection UC and others are products of Cisco USA.Cisco Unity Connection is a voice messaging platform.Cisco Unified Communications Manager CUCM, Unified CM. Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of a unified communications...
CVE-2023-5222
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5222
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
Hardcoded credentials
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5222 Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5222 Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5222
Summary (CVE-2023-5222) A critical vulnerability exists in Viessmann Vitogate 300 Web Management Interface. The issue affects the function isValidUser in /cgi-bin/vitogate.cgi, enabling authentication via a hard-coded password. Affected firmware versions: up to 2.1.3.0. Public PoCs and exploitat...
The vulnerability in the MODULYS GP (MOD3GP-SY-120K) module-based failover management web application allows attackers to execute attacks using cross-site scripting (XSS).
The vulnerability of the MODULYS GP MOD3GP-SY-120K web-based management application exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out attacks using cross-site scripting XSS...
The vulnerability of the MODULYS GP (MOD3GP-SY-120K) module-based power supply management web application allows a attacker to perform arbitrary actions.
The vulnerability of the MODULYS GP MOD3GP-SY-120K web-based management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions remotely...
The vulnerability of the MODULYS GP (MOD3GP-SY-120K) module-based power supply management web application allows a attacker to perform arbitrary actions.
The vulnerability of the MODULYS GP MOD3GP-SY-120K web-based management application relates to its dependence on cookie files without any checks for their validity and integrity. Exploiting this vulnerability could allow an attacker to perform arbitrary actions remotely...
The vulnerability of the User Creation Handler component of the /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 file in the C-DATA Web Management System allows a malicious individual to escalate their privileges.
The vulnerability of the User Creation Handler component in the /cgi-bin/jumpto.php?class=user&page=configsave&isphp=1 system of the C-DATA Web Management System is related to errors in managing access control. Exploiting this vulnerability could allow a malicious actor to increase their privileg...
Green Rocket Security GreenRADIUS Cross-Site Scripting Vulnerability
Green Rocket Security GreenRADIUS is a multiple authentication server from Green Rocket Security, Inc. to integrate with various applications and services to enforce MFA. A cross-site scripting vulnerability exists in Green Rocket Security GreenRADIUS v5.1.1.1 and prior versions, which stems from...
CVE-2023-39266
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to...
Cross site scripting
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to...
CVE-2023-39266 Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to...