4384 matches found
Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln.
No description provided by source. !/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found: Oct 20th 2011 Test...
Compaq Web-Based Management Agent Remote Stack Overflow Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8014/info Compaq Web-Based Management Agent has been reported prone to a remote denial of service vulnerability. The problem occurs when making malformed requests to the service. The resulting error reports a stack...
CVE-2014-1990
Cross-site request forgery CSRF vulnerability in TopAccess aka the web-based management utility on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords...
JVN#13313061: TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery
e-Studio provided by TOSHIBA TEC CORPORATION is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in a cross-site request forgery. Impact If the administrator views a malicious page while logged into the...
Palo Alto Networks PAN-OS < 5.0.10 / 5.1.x < 5.1.5 XSS
The remote host is running a version of Palo Alto Networks PAN-OS prior to 5.0.10 / 5.1.x prior to 5.1.5. It is, therefore, affected by a cross-site scripting vulnerability due to a failure to sanitize user-supplied input to the web-based device management interface. C Tenable Network Security,...
TP-Link Wireless Lite N Access Point Directory Traversal (CVE-2012-5687)
A directory traversal vulnerability has been reported in TP-LINK TL-WR841N Wireless Router Web-Based Management. The vulnerability is due to lack of sanitization of the URL paramaters. A remote attacker can exploit this issue by viewing the router configuration and password files...
CVE-2012-6590
The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139...
CVE-2012-6590
The CVE-2012-6590 entry affects Palo Alto Networks PAN-OS 4.0.x prior to 4.0.8. The vulnerability is an information-disclosure issue where the web-based management UI may leak verbose error information to remote attackers through specially crafted input. Affected component: the PAN-OS web managem...
CVE-2012-6590: Exposure of Sensitive Information to an Unauthorized Actor
The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139...
Symantec Endpoint Protection Center (SPC) Small Business Edition Buffer Overflow Vulnerability
The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmsbebofvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ Symantec Endpoint Protection Center SPC Small Business Edition Buffer Overflow Vulnerabili...
Symantec Endpoint Protection Manager (SEPM) Buffer Overflow Vulnerability
The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmbofvuln.nasl 6074 2017-05-05 09:03:14Z teissa $ Symantec Endpoint Protection Manager SEPM Buffer Overflow Vulnerability Authors: Thanga Praka...
CVE-2013-0717
Multiple cross-site request forgery CSRF vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that 1...
JVN#59503133: Multiple NEC mobile routers vulnerable to cross-site request forgery
Multiple mobile routers provided by NEC contain a vulnerability in web-based management utility, which may result in a cross-site request forgery. Impact If a user views a malicious page while logged in, settings of the product may be initialized, or the product may be rebooted. Solution Update t...
PT-2013-2555
Name of the Vulnerable Software and Affected Versions NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the web-based...
CVE-2012-6276
Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via the URL parameter...
CVE-2012-6276
Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via the URL parameter...
PT-2013-1921
Name of the Vulnerable Software and Affected Versions TP-LINK TL-WR841N router versions 3.13.9 build 120201 Rel.54965n and earlier Description The issue allows remote attackers to read arbitrary files via the URL parameter in the web-based management interface. Recommendations For TP-LINK TL-WR84...
CVE-2012-6276: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via the URL parameter...
FW: =| Security Advisory - TP-LINK TL-WR841N XSS (Cross Site Scripting) |=
=| Security Advisory - TP-LINK TL-WR841N XSS Cross Site Scripting |= Issue: TL-WR841N 300Mbps Wireless N Router by "TP-LINK" Firmware Version: 3.13.9 Build 120201 Rel.54965n and Below Discovered Date: 17/11/2012 Author: Matan Azugi [email protected] Product Vendor:...
TP-LINK TL-WR841N 3.13.9 Cross Site Scripting
=| Security Advisory - TP-LINK TL-WR841N XSS Cross Site Scripting |= Issue: TL-WR841N 300Mbps Wireless N Router by "TP-LINK" Firmware Version: 3.13.9 Build 120201 Rel.54965n and Below Discovered Date: 17/11/2012 Author: Matan Azugi [email protected] Product Vendor:...