ATCOM PBX IP01 / IP08 / IP4 / IP2G4A - Authentication Bypass

Title: ATCOM PBX system , auth bypass exploit Author: i-Hmx contact : [email protected] Home : sec4ever.com Tested on : ATCOM IP01 , IP08 , IP4G and ip2G4A Details The mentioned system is affected by auth bypass flaw that allow an attacker to get admin access on the vulnerable machine without...

ATCOM PBX IP01 / IP08 / IP4 / IP2G4A - Authentication Bypass

Exploit for hardware platform in category web applications Title: ATCOM PBX system , auth bypass exploit Author: i-Hmx contact : email protected Home : sec4ever.com Tested on : ATCOM IP01 , IP08 , IP4G and ip2G4A Details The mentioned system is affected by auth bypass flaw that allow an attacker ...

ATCOM PBX IP01 IP08 IP4 IP2G4A - Authentication Bypass

ATCOM PBX IP01 IP08 IP4 IP2G4A - Authentication Bypass Title: ATCOM PBX system , auth bypass exploit Author: i-Hmx contact : [email protected] Home : sec4ever.com Tested on : ATCOM IP01 , IP08 , IP4G and ip2G4A Details The mentioned system is affected by auth bypass flaw that allow an attacker to...

ATCOM PBX Authentication Bypass

Title: ATCOM PBX system , auth bypass exploit Author: i-Hmx contact : [email protected] Home : sec4ever.com Tested on : ATCOM IP01 , IP08 , IP4G and ip2G4A Details The mentioned system is affected by auth bypass flaw that allow an attacker to get admin access on the vulnerable machine without...

Directory traversal

Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...

HackerOne: Able to remove the admin access of my program

Hey Jobert, There is a functional bug in hackerone, using which i am able to make the my program admin free. This shouldn't be happen in the program because atleast one admin be there in program. Request: PUT /sasas/groups/12307 HTTP/1.1 Host: hackerone.com User-Agent: Mozilla/5.0 Macintosh; Inte...

Elevation of Privilege Vulnerability in ManageEngine OPutils

ManageEngine OpUtils is a set of system and network monitoring tools. An elevation of privilege vulnerability exists in ManageEngine OpUtils, which allows an attacker to exploit the vulnerability to elevate privileges to become an administrator of an application...

Multiple Vulnerabilities in ManageEngine Firewall Analyzer

ManageEngine Firewall Analyzer is a web-based firewall log analysis tool from Zoho that collects, correlates, and reports on enterprise-wide logs from firewalls, proxy servers, and Radius servers. Elevation of privilege and SQL injection vulnerabilities exist in ManageEngine Firewall Analyzer,...

MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin)

Add admin user Testingus: -------------------------...

Gonafish LinksCaffe Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in Gonafish LinksCaffe due to a lack of required authentication for the application's admin script. Allowing an attacker to simply use the admin function by knowing the name and location of the script...

jenkins: Secret key not verified when connecting a slave (SECURITY-184)

Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave...

CVE-2016-2243

Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service BIOS recovery failure by leveraging administrative access...

jenkins: API tokens of other users available to admins (SECURITY-200)

Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user...

PT-2016-1104

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 5.0.0 through 5.0.11 FortiAnalyzer versions 5.2.x prior to 5.2.5 FortiSwitch versions 3.3.x prior to 3.3.3 FortiCache versions 3.0.x prior to 3.0.8 FortiOS versions 4.1.x prior to 4.1.11 FortiOS versions 4.2.x prior to...

CVE-2015-6020

ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the user account...

Guangzhou Shengqi Computer Information Technology Co., Ltd.'s Administrative Asset Management System Has a java Deserialization Vulnerability

Guangzhou Shengqi computer information technology limited company provides software products and technical services. Guangzhou Shengqi Computer Information Technology Co., Ltd. administrative utility asset management system java deserialization vulnerability, an attacker using the relevant tools,...

CVE-2015-7911

Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via...

WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability

WordPress Google Adsense plugin version 1.29 suffers from a cross site scripting vulnerability. WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability Plugin Name : Google Adsense Effected Version : 1.29 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XS...

PT-2015-2867

Name of the Vulnerable Software and Affected Versions Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 Juniper ScreenOS versions 6.3.0r12 before 6.3.0r12b Juniper ScreenOS versions 6.3.0r13 before 6.3.0r13b Juniper ScreenOS versions 6.3.0r14 before 6.3.0r14b Juniper ScreenOS versions 6.3.0r15...

WordPress Google Captcha 1.05 Cross Site Scripting

Plugin Name : Google Captcha reCAPTCHA Effected Version : 1.05 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the...