Xsuite <=2.4.4.5 - Open Redirect

Xsuite 2.4.4.5 and prior contains an open redirect vulnerability, which can allow a remote attacker to redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the redirurl parameter. id: CVE-2015-4668 info: name: Xsuite =2.4.4.5 - Open Redirect author: 0xAkoko...

Xceedium Xsuite <=2.4.4.5 - Local File Inclusion

Xceedium Xsuite 2.4.4.5 and earlier is vulnerable to local file inclusion via opm/readsessionlog.php that allows remote attackers to read arbitrary files in the logFile parameter. id: CVE-2015-4666 info: name: Xceedium Xsuite =2.4.4.5 - Local File Inclusion author: 0xAkoko severity: medium...

Xsuite <=2.4.4.5 - Open Redirect Detection

Xsuite 2.4.4.5 and prior contains an open redirect vulnerability, which can allow a remote attacker to redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the redirurl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Xsuite 2.""" import re from...

Xceedium Xsuite - read_sessionlog LFI Detection

Detects Xceedium Xsuite LFI via /opm/readsessionlog.php?logFile=....//etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Xceedium Xsuite readsessionlog.php LFI CVE-2015-4666.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

EUVD-2015-4684

Malware in sbrugna...

EUVD-2015-4688

Malware in sbrugna...

EUVD-2015-4687

Malware in sbrugna...

Hardcoded credentials

Multiple hardcoded credentials in Xsuite 2.x...

Information disclosure

The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system...

Open redirect

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter...

CVE-2015-4669

The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system...

CVE-2015-4667

Multiple hardcoded credentials in Xsuite 2.x...

CVE-2015-4668

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter...

CVE-2015-4669

The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system...

CVE-2015-4667

CVE-2015-4667 affects Xceedium Xsuite 2.x (notably versions 2.3.0 and 2.4.3.0). The connected documents describe multiple hardcoded credentials vulnerabilities, including a hard-coded database password (n1b2dy) and broader issues in Xsuite 2.x that enable remote/ local access. Additional related ...

CVE-2015-4668

CVE-2015-4668 describes an open redirect in Xsuite 2.4.4.5 and earlier, exploitable via a malicious redirurl parameter to redirect users to arbitrary sites and enable phishing. The NVD entry and multiple connected sources confirm the affected product as Xsuite, with the component/entry point bein...

CVE-2015-4669

The CVE-2015-4669 entry pertains to Xceedium Xsuite 2.x where the MySQL root user has no password set, allowing Local access to the databases. The connected documents corroborate that this vulnerability enables local users to access databases and, in combination with other issues (e.g., command i...

CVE-2015-4667

Multiple hardcoded credentials in Xsuite 2.x...

CVE-2015-4668

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter...

CVE-2015-4668: URL Redirection to Untrusted Site

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter...