Sagem Fast 3304-V2 - Authentication Bypass (1)

Sagem Fast 3304-V2 - Authentication Bypass 1 Title : Sagem F@st 3304-V2 Authentication Bypass Vendor : http://www.sagemcom.com Severity : High Tested on : Firefox, Google Chrome, Internet Explorer Tested Router : Sagem F@st 3304-V2 3304, 3464, 3504 may also be affected Date : 2014-09-04 Author :...

Fedora 20 : ReviewBoard-1.7.22-2.fc20 (2014-3446)

New upstream security release 1.7.22 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.22/ - Security Fixes : - An XSS vulnerability was found in the Search field's auto-complete. - New Features : - Added support for anonymous access to public Local Sites. - Added support for...

PYSEC-2014-53

Multiple unspecified vulnerabilities in 1 dataitems.py, 2 get.py, and 3 traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors...

PYSEC-2014-53

Multiple unspecified vulnerabilities in 1 dataitems.py, 2 get.py, and 3 traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors...

CVE-2013-4189

CVE-2013-4189: Affects Plone components dataitems.py, get.py, and traverseName.py across Plone versions 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. Description indicates remote authenticated users with administrator access can access nodes above a subtree via unknown vectors. The connected advisories ...

PT-2014-2752

Name of the Vulnerable Software and Affected Versions Plone versions 2.1 through 4.1 Plone versions 4.2.x through 4.2.5 Plone versions 4.3.x through 4.3.1 Description The issue allows remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown...

Code Execution vulnerability in Contact Form 7 for WordPress

Hello 3APA3A! I want to inform you about vulnerability in Contact Form 7 plugin for WordPress. This is Code Execution via Arbitrary File Uploading vulnerability. ------------------------- Affected products: ------------------------- Vulnerable are Contact Form 7 3.5.2 and previous versions. After...

startbbs开源论坛存储型xss可盲打管理员

简要描述： rt 详细说明： 前面发的2发存储型xss危害可能都没那么大，但是这次存储型xss出现的位置在帖子正文，访问就中。 漏洞产生的原因：对规则过滤不严可以绕过。 以官方为例： 发布一条帖子，标题什么的随意。正文填入如下代码： 保存一下： 漏洞证明： 访问帖子： 具体利用可以参考实例2...

Authentication flaw

The D-Link DSL-2740B Gateway with firmware EU1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi...

CVE-2013-2271: Undefined Security Weakness

The D-Link DSL-2740B Gateway with firmware EU1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi...

PT-2013-3632

Name of the Vulnerable Software and Affected Versions D-Link DSL-2740B Gateway version EU 1.0 Description The issue allows remote attackers to bypass authentication and gain administrator access when an active administrator session exists. This can be achieved by sending a request to the...

D-Link Planning to Patch Router Backdoor Bug

D-Link is in the process of developing a patch for a serious security vulnerability in some of its older routers that essentially functions as a backdoor. The bug, discovered by a security researcher and publicized over the weekend, enables a remote user to log into an affected router as an...

PT-2013-5454 · Esri · Esri Arcgis For Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS for Server versions 10.1 through 10.2 Description: The mobile-upload feature in Esri ArcGIS for Server allows remote authenticated users to upload .exe files by leveraging publisher or administrator privileges. Recommendations: Fo...

Authentication bypass in D-Link devices (session cookies not validated)

Vendor: D-Link Affected Products: -DIR-505L SharePort Mobile Companion HW: A1 / FW: 1.01 -DIR-826L Wireless N600 Cloud Router HW: A1 / FW: 1.02 Vendor Notification: April 8, 2013 Public Disclosure: July 8, 2013 Vulnerability Type: Authentication Bypass CVE Reference: CVE-2013-4772 Solution Status...

Authentication bypass in D-Link routers

Vendor: D-Link Affected Products: -DIR-505L SharePort Mobile Companion HW: A1 / FW: 1.01 -DIR-826L Wireless N600 Cloud Router HW: A1 / FW: 1.02 Vendor Notification: April 8, 2013 Public Disclosure: July 8, 2013 Vulnerability Type: Authentication Bypass CVE Reference: CVE-2013-4772 Solution Status...

CVE-2013-0215

oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service daemon crash and host-control outage, or memory consumption or obtain sensitive control-plane data by...

[USN-1750-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1750-1 February 26, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Oracle Application Express (Apex) Administration Interface is Accessible

In production environments, the Apex Administration and Builder applications should be disabled to prevent administrator or developer access to the instance via a web browser. ------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Look for...

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

SuSE Update for XEN openSUSE-SU-2012:1572-1 (XEN)

Check for the Version of XEN OpenVAS Vulnerability Test $Id: gbsuse201215721.nasl 8336 2018-01-09 07:01:48Z teissa $ SuSE Update for XEN openSUSE-SU-2012:1572-1 XEN Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free...