CVE-2014-3821

The CVE-2014-3821 entry describes a Cross-site scripting (XSS) vulnerability in Juniper Junos SRX Web Authentication (webauth) across multiple releases (11.4 before 11.4R11; 12.1X44 before 12.1X44-D34; 12.1X45 before 12.1X45-D25; 12.1X46 before 12.1X46-D20; 12.1X47 before 12.1X47-D10). The issue ...

PT-2014-1957

Name of the Vulnerable Software and Affected Versions Junos versions 11.4 through 11.4R10 Junos versions 12.1X44 through 12.1X44-D33 Junos versions 12.1X45 through 12.1X45-D24 Junos versions 12.1X46 through 12.1X46-D19 Junos versions 12.1X47 through 12.1X47-D9 Description A cross-site scripting X...

CVE-2014-3821: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SRX Web Authentication webauth in Juniper Junos 11.4 before 11.4R11, 12.1X44 before 12.1X44-D34, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 allows remote attackers to inject arbitrary web script or HTML via...

INSTEON Hub 2242-222 - Lack of Web and API Authentication

No description provided by source. Trustwave SpiderLabs Security Advisory TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub Published: 8/01/13 Version: 1.0 Vendor: INSTEON http://www.INSTEON.com/ Product: Hub Version affected: 2242-222 model discontinued Product...

Real Networks GameHouse dldisplay ActiveX control 0 Port Buffer Overflow (1)

No description provided by source. source: http://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the corre...

Synology NAS / DiskStation Manager Detection (HTTP)

HTTP based detection of Synology NAS devices, DiskStation Manager DSM OS and application. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

session file spoofing vulnerability(marginalia non-cross-directory ideas)-vulnerability warning-the black bar safety net

Herein, the theoretical significance may be greater than the practical significance, only there is no way the time to provide ideas. 0x00 session description 0x01 Use Conditions 0x02 use ideas 0x03 vulnerability proof 0x04 prevention methods 0x00 session description Generally the web authenticati...

INSTEON Hub 2242-222 - Lack of Web and API Authentication

Exploit for hardware platform in category web applications The INSTEON Hub allows users to control their home automation devices from their home, and across the Internet. To allow control of the devices from the Internet requires that a user create a port forward from the Internet to the Hub on...

INSTEON Hub 2242-222 - Lack of Web and API Authentication

Trustwave SpiderLabs Security Advisory TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub Published: 8/01/13 Version: 1.0 Vendor: INSTEON http://www.INSTEON.com/ Product: Hub Version affected: 2242-222 model discontinued Product description: Home automation controller f...

Ubuntu Update for kde4libs USN-1842-1

Check for the Version of kde4libs OpenVAS Vulnerability Test $Id: gbubuntuUSN18421.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for kde4libs USN-1842-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu: Security Advisory (USN-1842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 : kde4libs vulnerability (USN-1842-1)

It was discovered that KIO would sometimes display web authentication credentials under certain error conditions. If a user were tricked into opening a specially crafted web page, an attacker could potentially exploit this to expose confidential information. Note that Tenable Network Security has...

USN-1842-1: KDE-Libs vulnerability

It was discovered that KIO would sometimes display web authentication credentials under certain error conditions. If a user were tricked into opening a specially crafted web page, an attacker could potentially exploit this to expose confidential information...

Netgear DGN2200B - 'pppoe.cgi' Remote Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Netgear DGN2200B pppoe.cgi Remote...

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Title: ====== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=850 VL-ID: ===== 850 Common Vulnerability Scoring System:...

CVE-2012-6029

Multiple cross-site scripting XSS vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 cm or 2 uri parameters to a perfigoweblogin.jsp, or the 3 cm, 4 provider, 5 session, 6 uri, 7...

CVE-2012-6029

CVE-2012-6029 affects Cisco NAC Appliance 4.9.2 and earlier. The vulnerability is a set of cross-site scripting flaws in the web-authentication flow, exploitable by an unauthenticated, remote attacker who persuades a user to follow a malicious URL. Specifically, XSS can be triggered via parameter...

PT-2013-1870

Name of the Vulnerable Software and Affected Versions Cisco NAC Appliance versions 4.9.2 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web-authentication function. These vulnerabilities allow remote attackers to inject arbitrary web script or...

CVE-2012-6029: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 cm or 2 uri parameters to a perfigoweblogin.jsp, or the 3 cm, 4 provider, 5 session, 6 uri, 7...

PT-2013-1683 · Elinks +3 · Elinks +3

Name of the Vulnerable Software and Affected Versions: ELinks versions prior to 0.12pre6 Description: The issue concerns the delegation of user credentials through GSSAPI when using HTTP Negotiate or GSS-Negotiate authentication. This allows remote servers to authenticate as the client via the...