IBM WebSphere Portal Active Content Filtering XSS (PI38732)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability in the Active Content Filtering component due to improperly validating user-supplied input. A remote attacker can exploit this by creating a specially crafted URL designed ...

Solarwinds Firewall Security Manager Detection

Detection of Solarwinds Firewall Security Manager The script sends a connection request to the server and attempts to detect Solarwinds Firewall Security Manager FSM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

HackerOne: CSV Injection with the CVS export feature

The "Download as a CSV" feature of HackerOne does not properly "escape" fields. This allows an adversary to turn a field into active content so when a response team download the csv and opens it, the active content gets executed. Here is more information about this issue:...

JSON 'ActiveSupport::JSON.encode()' function cross-site scripting vulnerability

JSON is a lightweight data exchange language , it is a subset of Javascript , and the use of completely language-independent text format . A cross-site scripting vulnerability exists in JSON, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing...

Windows Gather Credentials Local Administrator Password Solution

This module will recover the LAPS Local Administrator Password Solution passwords, configured in Active Directory, which is usually only accessible by privileged users. Note that the local administrator account name is not stored in Active Directory, so it is assumed to be 'Administrator' by...

VMware vCenter Active Virtual Machines

Binary data vmwarevcenteractivevms.nbin...

Tango FTP 1.0 Active-X Heap Spray Vulnerability

Tango FTP active-x heap spray exploit that leverages a vulnerability in the COM component used eSellerateControl350.dll 3.6.5.0 method of the GetWebStoreURL member. Affects version 1.0 build 136. Tango FTP Activex Heap Spray Exploit Version:1.0Build 136 The vulnerability lies in the COM component...

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities Product & Service Introduction: =============================== SupportCenter Plus is a web-based customer support software that lets...

Tango DropBox 3.1.5 Active-X Heap Spray Vulnerability

Tango DropBox active-x heap spray exploit that leverages a vulnerability in the COM component used eSellerateControl350.dll 3.6.5.0 method of the GetWebStoreURL member. Affects versions 3.1.5 and PRO. Tango DropBox Activex Heap Spray Exploit Version:3.1.5 + PRO The vulnerability lies in the COM...

ManageEngine SupportCenter Plus 7.90 XSS / Traversal / Password Disclosure

Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1501 Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID:...

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1501 Release Date: ============= 2015-06-19...

Tango FTP 1.0 Active-X Heap Spray

Tango FTP Activex Heap Spray Exploit Version:1.0Build 136 The vulnerability lies in the COM component used eSellerateControl350.dll 3.6.5.0 method of the ''GetWebStoreURL' member. Vendor Homepage:http://www.tangoftp.com/index.html Software Link:http://www.tangoftp.com/downloads/index.html Author:...

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1501 Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID:...

ManageEngine SupportCenter 7.90 - Multiple Vulnerabilities

Document Title: =============== ManageEngine SupportCenter 7.90 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1501 Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID: ====================================...

ManageEngine SupportCenter 7.90 - Multiple Vulnerabilities

Document Title: =============== ManageEngine SupportCenter 7.90 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1501 Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID: ====================================...

Tango DropBox 3.1.5 Active-X Heap Spray

Tango DropBox Activex Heap Spray Exploit Version:3.1.5 + PRO The vulnerability lies in the COM component used eSellerateControl350.dll 3.6.5.0 method of the ''GetWebStoreURL' member. Vendor Homepage:http://etonica.com/dropbox/index.html Software Link:http://etonica.com/dropbox/download.html Autho...

Apexis IP CAM Information Disclosure Vulnerability (Jun 2016) - Active Check

Apexis IP Cameras are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Possible Denial of Service attack in Active Support

Specially crafted XML documents can cause applications to raise a SystemStackError and potentially cause a denial of service attack. This only impacts applications using REXML or JDOM as their XML processor. Other XML processors that Rails supports are not impacted. All users running an affected...

Microsoft Active Directory Federation Services crossite scripting

Crossite scipring in web interface...

IT Security – Do it the hard or easy way!

Whether you are a one-stop-shop IT guy or a network admin on a large IT team you owe it to yourself to learn about Security Information and Event Management SIEM technology. Why? SIEM lets you correlate between events recorded in different logs for related systems. This is significant because...