Fortinet FortiWeb CSRF Vulnerability (FG-IR-16-010)

Fortinet FortiWeb is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WebCalendar 1.2.7 CSRF Bypass

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBCALENDAR-V1.2.7-CSRF-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ========================== www.k5n.us/webcalendar.php Product: ================== WebCalendar v1.2.7...

WebCalendar 1.2.7 - Multiple Vulnerabilities

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBCALENDAR-V1.2.7-CSRF-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ========================== www.k5n.us/webcalendar.php Product: ================== WebCalendar v1.2.7...

FortiWeb CSRF Vulnerability

A CSRF vulnerability could allow attackers to change admin password with crafted forms...

BDCOM Boda BSR2800-08C Multiservice Router has a Design Flaw Vulnerability

BDCOM BODA BSR2800-08C Multi-Service Router is a new generation of switched multi-service router platform developed by Shanghai BODA Data Communication Co. The platform adopts 64-bit multi-core processor + high-speed switching engine + FPGA supporting design scheme with excellent performance. A...

Meteocontrol WEB’log - Admin Password Disclosure

No description provided by source...

ArticleSetup 1.00 Cross Site Request Forgery

...

ArticleSetup 1.00 - Cross-Site Request Forgery (Change Admin Password)

Exploit for php platform in category web applications 0day.today 2018-03-05...

ArticleSetup 1.00 - Cross-Site Request Forgery (Change Admin Password)

ArticleSetup 1.00 - Cross-Site Request Forgery Change Admin Password...

ArticleSetup 1.00 - Cross-Site Request Forgery (Change Admin Password)

...

PHP Realestate Script Script 4.9.0 - SQL Injection

Exploit Title: Property Agent RealeState Script Sql Injection Date: 2015-05-27 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.phpscriptsmall.com/product/php-realestate-script/ Version: 4.9.0 Exploit :...

Meteocontrol WEB’log - Admin Password Disclosure (Metasploit)

Meteocontrol WEB’log - Admin Password Disclosure Metasploit Exploit Title: Meteocontrol WEB'log - Extract Admin password Discovered by: Karn Ganeshen Vendor Homepage: http://www.meteocontrol.com/en/ Versions Reported: All Meteocontrol WEB'log versions CVE-ID: CVE-2016-2296 Meteocontrol WEB'log -...

Observium 0.16.7533 - Cross-Site Request Forgery

Observium 0.16.7533 - Cross-Site Request Forgery & retype password instead of having to insert the older password. such an attack would look like this: -- Change admin password...

IBM Spectrum Scale Sensitive Information Disclosure Vulnerability

IBM Spectrum Scale is a scalable data and file management solution based on IBM GPFS. IBM Spectrum ScaleWhen a program has the Spectrum Scale GUI installed, a remote attacker can exploit a vulnerability to obtain sensitive information including the ADMIN password...

Moxa Won't Patch Publicly Disclosed Flaws Until August

Update A number of publicly disclosed vulnerabilities in Moxa networking gear won’t be patched until August, if at all, according to an alert published on Friday by the Industrial Control System Cyber Emergency Response Team ICS-CERT. Researcher Joakim Kennedy of Rapid7 disclosed in March some...

CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

Stronger algorithm used to digest instance admin password

Let's use PKCS5S2...

Stronger algorithm used to digest instance admin password

Let's use PKCS5S2...

ZyXEL NBG-418N devices with firmware credential management vulnerability

ZyXEL NBG-418N is a wireless broadband router from ZyXEL Technology. A credential management vulnerability exists in the ZyXEL NBG-418N devices with firmware 1.00 AADZ.3 C0. Since the device's web management interface C0 has a 1234 administrator account, it allows a remote attacker to connect via...

Grawlix 1.0.3 - Cross-Site Request Forgery

Exploit for php platform in category web applications Security Advisory - Curesec Research Team 1. Introduction Affected Product: Grawlix 1.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.getgrawlix.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendo...