Cisco Ultra Services Framework Staging Server Security Bypass Vulnerability

Cisco Ultra Services Framework Staging Server is a segmentation server in an intelligent online service delivery platform from the U.S. company Cisco Cisco. A security vulnerability exists in Cisco Ultra Services Framework Staging Server. A remote attacker could exploit the vulnerability to log i...

Microsoft Windows PPL Process Injection Privilege Escalation Exploit

Exploit for windows platform in category dos / poc Windows: PPL Process Injection EoP Platform: Windows 10 1703 x64 Class: Elevation of Privilege Summary: It’s possible to inject code into a PPL protected process by hijacking COM objects leading to accessing PPL processes such as Lsa and...

JVN#23340457: Multiple vulnerabilities in WebCalendar

WebCalendar provided by k5n.us contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10840 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N| Base Score: 2.6 Directory...

Logic Design Vulnerability in SentCMS v3.0.1707

SentCMS is a website management system of Nanchang Tengshu Technology Co. A logical design vulnerability exists in SentCMS v3.0.1707. The vulnerability exists in \application\user\controller\Profile.php, which allows an attacker to modify the administrator's information by modifying the member's...

Cisco ASR 5000 Series Aggregated Services Routers StarOS Elevation of Privilege Vulnerability

Cisco ASR 5000 Series Aggregated Services Routers are the ASR 5000 series of integrated services router products from Cisco.StarOS is the set of operating systems that run on them.CLI is one of the command-line programs. An elevation of privilege vulnerability exists in the CLI for StarOS in Cisc...

Lenovo ThinkPad for Windows Active Protection System Privilege Mobilization Vulnerability

Lenovo Thinkpad for Windows is a Windows-based laptop from the Chinese company Lenovo.Active Protection System is an autonomous functional component that protects the hard disk driver from damage caused by strong physical shocks and vibrations. A power lifting vulnerability exists in Active...

Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection

During the security analysis, ThunderScan discovered SQL injection vulnerability in Podlove Podcast Publisher WordPress plugin. The easiest way to reproduce the vulnerability is to visit the provided URL while being logged in as administrator or another user that is authorized to access the plugi...

Dahua IoT Devices Backdoor Unauthorized Access

An Unauthorized Access Vulnerability exists in Dahua devices. Successful exploitation of this vulnerability could allow a remote attacker to gain administrator level access on the affected device...

Juniper SSG Series device ScreenOS cross-site scripting vulnerability (CNVD-2017-23958)

The Juniper SSG Series is a family of firewall appliances from Juniper Networks.ScreenOS is one of the operating systems. A cross-site scripting vulnerability exists in Firewall+VPN in ScreenOS on Juniper SSG Series devices. A remote attacker can exploit this vulnerability to inject HTML/JavaScri...

JVN#14151222: Multiple vulnerabilities SONY Portable Wireless Server WG-C10

Portable Wireless Server WG-C10 provided by Sony Corporation contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2017-2275 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.8 CVSS v2| AV:A/AC:L/Au:S/C:P/I:P/A:P|...

Multiple EMC products insecure default password vulnerability

EMC ViPR SRM is a storage resource management software. An insecure default password vulnerability exists in multiple EMC products. An attacker could exploit this vulnerability to gain administrator privileges and perform further operations...

CVE-2017-2244

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cognito Software Moneyworks Password Disclosure Vulnerability

MoneyWorks is a multi-platform accounting solution. A password disclosure vulnerability exists in Cognito Software Moneyworks. The vulnerability stems from detailed logging that writes the administrator password to a globally readable file. An attacker could use this vulnerability to gain...

Arbitrary file deletion

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file...

CVE-2017-9615

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file...

CVE-2017-9615

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file...

CVE-2017-9615

CVE-2017-9615 (Cognito Moneyworks) affects Moneyworks 8.0.3 and earlier. The root cause is verbose logging that writes the administrator password to a world-readable file, leading to password exposure and potential administrative access to all data. The description in multiple sources confirms us...

Authentication flaw

WiMAX routers based on the MediaTek SDK libmtk that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request...

CVE-2017-3216

WiMAX routers based on the MediaTek SDK libmtk that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request...

Weak Password Vulnerability in AppEx CRE Smart Acceleration Gateway

AppEx is a full line of application delivery, WAN acceleration, and Internet acceleration hardware and software products. A weak password vulnerability exists in AppEx CRE Smart Acceleration Gateway. An attacker is allowed to log in to the system backend using the default weak password to gain...