6803 matches found
Open-AuditIT Professional 2.1 - Cross-Site Request Forgery
Open-AuditIT Professional 2.1 - Cross-Site Request Forgery Exploit Title: Open-AuditIT Professional 2.1 - Cross-Site Request Forgery CSRF Date: 27-03-2018 Exploit Author: Nilesh Sapariya Contact: https://twitter.com/nileshloganx Website: https://nileshsapariya.blogspot.com Vendor Homepage:...
CVE-2018-4841
A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...
Cross-site Scripting Vulnerability in Qibo Website Building System v7.0
Qibo CMS is a multifunctional modular website management system that combines articles, downloads, pictures, classifieds, videos, shopping malls, music, blogs, talents, Q&A and other modules. Qibo CMS v7.0 suffers from a cross-site scripting vulnerability, which is caused by the system not...
CVE-2017-0932
Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with access to an operator read-only account and ssh connection to the devices could escalate privileg...
CVE-2017-0935
Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admi...
Privilege escalation
Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admi...
Privilege escalation
Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admin...
CVE-2017-0935
Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admi...
AMD Acknowledges Newly Disclosed Flaws In Its Processors ā Patches Coming Soon
AMD has finally acknowledged 13 critical vulnerabilities, and exploitable backdoors in its Ryzen and EPYC processors disclosed earlier this month by Israel-based CTS Labs and promised to roll out firmware patches for millions of affected devices 'in the coming weeks.' According to CTS-Labs...
Authentication flaw
Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass with the attacker obtaining admin access via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request...
CVE-2018-8096
Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass with the attacker obtaining admin access via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request...
CVE-2018-8096
CVE-2018-8096 affects Datalust Seq versions before 4.2.605. The vulnerability is an authentication bypass exploitable via a PUT request to api/settings/setting-isauthenticationenabled with "Name":"isauthenticationenabled","Value":false, potentially granting admin access. Multiple connected source...
360 Wireless IP Camera is vulnerable (CNVD-2018-06852)
360 Wireless IP Camera is a webcam product from China's Qihoo 360 Qihu 360. A security vulnerability exists in the 360 Wireless IP Camera, which originates from the root account using a known SHA-512 password hash. The vulnerability can be exploited by a remote attacker to gain administrative...
CVE-2016-0235
IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM X-Force ID: 110326...
CVE-2017-18223
BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access...
OTRS Command Injection
Exploit Title: OTRS Authenticated file upload Date: 03-03-2018 Exploit Author: Ali BawazeEer Vendor Homepage: https://www.otrs.com/ Software Link: http://ftp.otrs.org/pub/otrs/ Version:5.0.2, 5.0.0 - 5.0.24, 6.0.0 - 6.0.1 Tested on: OTRS 5.0.2/CentOS 7.2.1511 CVE : CVE-2018-7567 Vulnerability...
CVE-2017-11632
CVE-2017-11632 affects Wireless IP Camera 360 devices. A root account exists with a known SHA-512 password hash, enabling remote attackers to obtain administrative access via TELNET. Multiple connected sources corroborate the root-privilege risk and remote TELNET vector, with high-severity impact...
Cisco Elastic Services Controller Software Authentication Bypass Vulnerability
Cisco Elastic Services Controller Software ESC is the U.S. Cisco Cisco, a set of open source for the management of virtual resources modular system. An authentication bypass vulnerability exists in the authentication feature of the Web-based business portal in Cisco Elastic ESC version 3.0.0, whi...
CVE-2018-0130
A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to gain administrative access to an affected system. The vulnerability is due to the presence of static default credentials f...
CVE-2018-0130
A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to gain administrative access to an affected system. The vulnerability is due to the presence of static default credentials f...