EMC M&R (Watch4net) Centralized Management Console XSS Vulnerability

A cross site scripting vulnerability was found in EMC M&R Watch4net Centralized Management Console. This issue allows attackers to perform a wide variety of actions, such as stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, logging their...

EMC M&R (Watch4net) Centralized Management Console XSS

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Centralized Management Console ------------------------------------------------------------------------ Han Sahin, November 2014...

Nihuo Web Log Analyzer 1.6 HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10988/info An HTML injection vulnerability is reported in Nihuo Web Log Analyzer. The problem occurs due to a lack of proper sanitization of user-supplied input data. Attackers may potentially exploit this issue to...

NuKed-Klan 1.x Submit Link Function HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11733/info NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the 'website name' input...

2Wire Routers - Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password NUEVOPASS:...

uTorrent WebUI 0.310 beta 2 - Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28847/info uTorrent WebUI is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions in the context of the affected application. uTorrent WebUI...

gBook 1.4 Administrative Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6033/info A vulnerability has been discovered in gBook v1.4. It has been reported that it is possible for an unauthorized attacker to gain administrative access to gBook by passing a malicious request to a php script...

F5 FirePass 6.0.2.3 - /vdesk/admincon/webyfiers.php css_exceptions Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29574/info F5 FirePass SSL VPN is prone to multiple cross-site request-forgery vulnerabilities because it fails to adequately sanitize user-supplied input. Exploiting these issues may allow a remote attacker to execute...

F5 BIG-IP 9.4.3 Web Management Interface Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27720/info F5 BIG-IP is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. F5 BIG-IP 9.4.3 is vulnerable; other...

Multiple CSRF vulnerabilties in Question/Answer Threads

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-47240. panel Multiple CSRF vulnerabilities exist on answers.atlassian.com where an attacker can potentially perform actions such...

Multiple Zoom Telephonics Devices Multiple Security Vulnerabilities (Aug 2013) - Active Check

Multiple Zoom Telephonics devices are prone to an information disclosure vulnerability, an authentication bypass vulnerability and an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Default credentials

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

PT-2013-4406

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System Software versions 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices Cisco TelePresence System Software version 6.0.3 and earlier on TX 9X00 devices Description The issue allows remote attackers to modify t...

CVE-2013-3454: Undefined Security Weakness

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

Zoom Telephonics (Multiple Devices) - Multiple Vulnerabilities

Zoom Telephonics Multiple Devices - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/61044/info Multiple Zoom Telephonics devices are prone to an information-disclosure vulnerability, multiple authentication bypass vulnerabilities and an SQL-injection vulnerability. Exploiting...

EasyPHP - index.php Authentication Bypass Remote PHP Code Injection

EasyPHP - index.php Authentication Bypass Remote PHP Code Injection source: https://www.securityfocus.com/bid/58945/info EasyPHP is prone to an authentication bypass and a PHP code execution vulnerability. Attackers may exploit these issues to gain unauthorized access to the affected application...

EasyPHP - '/index.php' Authentication Bypass / Remote PHP Code Injection

source: https://www.securityfocus.com/bid/58945/info EasyPHP is prone to an authentication bypass and a PHP code execution vulnerability. Attackers may exploit these issues to gain unauthorized access to the affected application and perform arbitrary actions or execute arbitrary PHP code within t...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

PT-2012-4133

Name of the Vulnerable Software and Affected Versions Johnson Controls CK721-A controller versions prior to SSM4388 03.1.0.14 BB Description The issue allows remote attackers to perform arbitrary actions via crafted packets to the TCP port 41014, also known as the download port. Recommendations F...