The vulnerability of the MPLS OAM service implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the MPLS OAM service implementation in the Cisco IOS XR operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted MPLS OAM packets...

Oracle Application Testing Suite - WebLogic Server Administration Console War Deployment (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Application Testing Suite WebLogic Server Administration Console War Deployment', 'Description' = %q This module abuses a feature in...

Oracle Application Testing Suite WebLogic Server Administration Console War Deployment Exploit

This Metasploit module abuses a feature in WebLogic Server's Administration Console to install a malicious Java application in order to gain remote code execution. Authentication is required, however by default, Oracle ships with a "oats" account that you could log in with, which grants you...

Oracle Application Testing Suite WebLogic Server Administration Console War Deployment

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Application Testing Suite WebLogic Server Administration Console War Deployment', 'Description' = %q This module abuses a feature in...

Exploit for Use After Free in Microsoft

CVE-2019-0708 CVE-2019-0708 Scanner PoC by @JaGoTuhttps://...

CVE-2019-12168

Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell aka Administration Commands screen...

CVE-2019-12168

Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell aka Administration Commands screen...

CVE-2019-12168

The Four-Faith Wireless Mobile Router F3x24 v1.0 is vulnerable to remote code execution (RCE) via the Command Shell (Administration > Commands) screen. The vulnerability is attributed to a lack of authentication in the device's microprogramming software. Threat intelligence indicates that acto...

CVE-2019-8927

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp file via these GET parameters: devSrc, emailId, excWeekModify, filterFlag, getFilter, mailReport, mset, popup, repschedule, repType, schDesc,...

CVE-2019-8929

The CVE-2019-8929 entry affects Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. It describes a stored/reflective cross-site scripting (XSS) vulnerability in the Administration zone, specifically in the /netflow/jspui/selectDevice.jsp page, exploitable via the GET parameters param and rty...

CVE-2019-8927

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp file via these GET parameters: devSrc, emailId, excWeekModify, filterFlag, getFilter, mailReport, mset, popup, repschedule, repType, schDesc,...

CVE-2019-8926

CVE-2019-8926 affects Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. The vulnerability is a reflected cross-site scripting (XSS) in the Admin zone, specifically in /netflow/jspui/popup1.jsp, exploitable via GET parameters bussAlert, customDev, and selSource. The technical details in con...

CVE-2019-8925

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet via the parameter schFilePath, allows remote authenticated users to bypass intended SecurityManager...

PT-2019-19262

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue exists in the Administration zone of the software. Cross-site scripting XSS is possible in the /netflow/jspui/popup1.jsp file via the bussAlert, customDev, an...

PT-2019-19261

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue allows remote authenticated users to bypass intended SecurityManager restrictions. This is due to an Absolute Path Traversal vulnerability in the Administrati...

PT-2019-19263

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue exists in the Administration zone of the software. Cross-site scripting XSS is possible in the /netflow/jspui/scheduleConfig.jsp file via several GET...

CVE-2019-12168: Missing Authorization

Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell aka Administration Commands screen...

CVE-2018-16138

An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...

CVE-2018-16138

An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...

CVE-2018-16138

An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...