CVE-2011-4801

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System ASAS Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Muster Render Farm Management System - Arbitrary File Download

Name: Muster Render Farm Management System Arbitrary File Download Vendor Website : http://www.vvertex.com/muster.html Date Released : November 29, 2011 Affected Software : Muster 6.20 Researcher : Nick Freeman [email protected] Description Security-Assessment.com has discovere...

Authenex A-KeyASAS Web Management Control 3.1.0.2 - Blind SQL Injection

Authenex A-KeyASAS Web Management Control 3.1.0.2 - Blind SQL Injection ============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at...

Authenex A-Key/ASAS Web Management Control 3.1.0.2 - Blind SQL Injection

============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade ...

Toshiba EStudio Multifunction Printer Authentication Bypass

============================================================================ Foofus.net Security Advisory: foofus-20111016 ============================================================================ Title: Toshiba EStudio Multifunction Printer Authentication Bypass Version: e-Studio series devic...

SA500 vulnerabilities - details

Hi Advisory by Cisco was published a few days ago Bugtraq ID: 48810. Now more details: 1. Unathenticated access to web management any user - including admin. Due to blind SQLi in the login form of web management port 443, https, login field, embedded sqlite DB, there is possible to obtain: a all...

Cisco Security Advisory: Cisco SA 500 Series Security Appliances Web Management Interface Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco SA 500 Series Security Appliances Web Management Interface Vulnerabilities Advisory ID: cisco-sa-20110720-sa500 Revision 1.0 For Public Release 2011 July 20 1600 UTC GMT...

Cisco SA 500 Series Security Appliances Web Management Interface Vulnerabilities

...

PT-2011-08: Multiple vulnerabilities in Dlink DPH 150SE/E/F1

Positive Research Center has discovered multiple vulnerabilities in Dlink DPH 150SE/E/F1 IP phone. 1. A vulnerability exists in web management interface of Dlink DPH 150SE and allows an unauthenticated user to obtain device configuration file with all the settings including administrator's...

H3C ER5100 enterprise-grade Dual-Core Broadband Router web Management page exists validation vulnerability-vulnerability warning-the black bar safety net

Brief description: H3C ER5100 enterprise-level Broadband Router web Management page exists validation vulnerability, unauthorized visitors may modify, restart, and view most of the system configuration. Vulnerability proof: ! http://222.223.5.218:8080/home.asp?userLogin.asp...

Animal husbandry star php web site management system of 0day-vulnerability warning-the black bar safety net

A small program in the holding Station is discovered this app, then across to see the source code. Tragedy just happened! admin/login.php source: ? php sessionstart; include "../include/databaseConfig.inc.php"; $admin = $POST'admin'; $pass = md5$POST'pass'; $codes = $POST'codes'; if$GET'action'...

CVE-2011-1645

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute...

Design/Logic Flaw

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the 1 ping test parameter ...

CVE-2011-1645

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute...

Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities Advisory ID: cisco-sa-20110525-rvs4000 Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

...

Cisco Security Agent code execution

Code execution via Web management interface...

CVE-2011-0887

The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...

PhpMyAdmin “error.php”spoofing vulnerability-vulnerability warning-the black bar safety net

Release date: 2010-12-10 Update date: 2010-12-13 Affected system: phpMyAdmin phpMyAdmin 3. x Description: -------------------------------------------------------------------------------- phpMyAdmin is PHP written tool used by the WEB Management of MySQL. phpMyAdmin implementation on the presence...

Multiple D-Link routers authentication bypass vulnerability-vulnerability warning-the black bar safety net

International famous network equipment manufacturers D-LINKfriends communicationscompany multiple the router's Web Management Interface the presence of the authentication bypass vulnerability may cause unauthorized user to browse, modify the router's Management Configuration. In addition, there i...