CVE-2018-6843

CVE-2018-6843 affects Kentico CMS: versions prior to 10.0.50 and prior to 11.0.3 expose an SQL injection in the administration interface due to unsafe construction/validation of user input. The vulnerability can allow manipulation or disclosure of data via the back-end database when accessed thro...

CVE-2018-6843: Improper Neutralization of Special Elements used in an SQL Command

Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface...

PT-2018-17771

Name of the Vulnerable Software and Affected Versions Kentico versions prior to 10.0.50 Kentico versions prior to 11.0.3 Description The administration interface of Kentico has SQL injection. Recommendations For Kentico versions prior to 10.0.50, update to version 10.0.50 or later. For Kentico...

CVE-2014-4613

Cross-site request forgery CSRF vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users via a pwg.users.add action in a request to ws.php...

CVE-2014-4613

Cross-site request forgery CSRF vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users via a pwg.users.add action in a request to ws.php...

PT-2018-4223

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.6.2 Description A cross-site request forgery CSRF issue exists in the administration panel, allowing remote attackers to hijack the authentication of administrators. This can be done by sending a request to "ws.php"...

CVE-2018-7678

A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...

CVE-2018-7678

A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...

Cross site scripting

A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...

CVE-2018-7678

CVE-2018-7678 is a cross-site scripting vulnerability in the Administration Console of NetIQ Access Manager (NAM) affecting NAM versions 4.3 and 4.4. The issue stems from improper input filtering in the Administration Console, enabling a remote attacker to execute arbitrary browser code. Supporte...

Workspace Environment Management (WEM): Active Directory search improvements in WEM 4.6

Introduction The Active Directory AD system built into the WEM Administration Console and WEM Infrastructure Server has been refactored in WEM 4.6 to improve performance and stability. Although AD searches performed by the WEM Console and WEM Infrastructure server in previous WEM versions have...

CVE-2018-7678: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...

PT-2018-18204

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.3 through 4.4 Description A cross-site scripting issue exists in the Administration Console. Recommendations For versions 4.3 and 4.4, at the moment, there is no information about a newer version that contains a...

Solaris 10 (sparc) : 119252-29

SunOS 5.10: System Administration Applicat. Date this patch was last updated by Sun : Jul/28/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Prisma Industriale Checkweigher PrismaWEB 1.21 - Hard-Coded Credentials

Prisma Industriale Checkweigher PrismaWEB 1.21 - Hard-Coded Credentials Prisma Industriale Checkweigher PrismaWEB 1.21 Authentication Bypass Vendor: Prisma Industriale S.r.l. Product web page: https://www.prismaindustriale.com Affected version: 1.0 Rev 21, EPROM 202FWSAM ?? Summary: Web...

Cisco Videoscape AnyRes Live Cross-Site Scripting Vulnerability

Cisco Videoscape AnyRes Live is a multi-format video encoder released by Cisco USA. A cross-site scripting vulnerability exists in the web-based administration interface of Cisco Videoscape AnyRes Live, which arises from the program's failure to adequately validate user-submitted input. A remote...

Solaris 10 (sparc) : 124630-42

SunOS 5.10: System Administration Applicat. Date this patch was last updated by Sun : Jun/28/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 119253-32

SunOS 5.10x86: System Administration Appl. Date this patch was last updated by Sun : Jul/28/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Prisma Industriale Checkweigher PrismaWEB 1.21 Authentication Bypass

Summary Web Administration of Machine. Description The vulnerability exists due to the disclosure of hard-coded credentials allowing an attacker to effectively bypass authentication of PrismaWEB with administrator privileges. The credentials can be disclosed by simply navigating to the loginpar.j...

Python-Rootkit - Python Remote Administration Tool (RAT) To Gain Meterpreter Session

This is a full undetectable python RAT which can bypass almost all antivirus and open a backdoor inside any windows machine which will establish a reverse httpsMetasploit connection to your listening machine. ViRu5 life cycle Bypass all anti-virus. Inject a malicious powershell script into memory...