Astaro Security Gateway 7 - Remote Code Execution

Astaro Security Gateway 7 - Remote Code Execution !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

Astaro Security Linux 6.0 01 HTTP CONNECT Unauthorized Access Weakness

No description provided by source. source: http://www.securityfocus.com/bid/14665/info Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attacks to exploit latent...

Astaro Security Linux 5 'index.fpl' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38893/info Astaro Security Linux is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2013-5932

Technical details for CVE-2013-5932 are not publicly available in the provided documents. No confirmed affected versions, root cause, or remediation are given. Monitor for updates.

Astaro Security Gateway 8.1 - HTML Injection

Astaro Security Gateway 8.1 - HTML Injection source: https://www.securityfocus.com/bid/51301/info Astaro Security Gateway is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML...

Astaro Security Gateway 8.1 - HTML Injection

source: https://www.securityfocus.com/bid/51301/info Astaro Security Gateway is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...

CVE-2012-3238

Cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment optional" field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment optional" field...

CVE-2012-3238

CVE-2012-3238 describes a cross-site scripting (XSS) vulnerability in the Backup/Restore component of WebAdmin on Astaro Security Gateway, exploited by injecting arbitrary web-script/HTML via the “Comment (optional)” field. Affected product/version scope: Astaro Security Gateway prior to 8.305 (W...

CVE-2012-3238

Cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment optional" field...

Astaro Security Gateway crossite scripting

Multiple crossite scripting possibilities...

Astaro Command Center crossite scripting

Multiple crossite scripting vulnerabilities...

Astaro Security Gateway v7.504 - Multiple Web Vulnerabilities

Title: ====== Astaro Security Gateway v7.504 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=8 VL-ID: ===== 8 Introduction: ============= Das Astaro Security Gateway 625 wurde speziell fur den Schutz gro?er Unternehm...

Astaro Command Center v2.x - Multiple Web Vulnerabilities

Title: ====== Astaro Command Center v2.x - Multiple Web Vulnerabilities Date: ===== 2012-04-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=4 VL-ID: ===== 4 Introduction: ============= We are pleased to announce the General Availability of the Astaro Command Center...

Astaro Command Center v2.x - Multiple Web Vulnerabilities

Title: ====== Astaro Command Center v2.x - Multiple Web Vulnerabilities Date: ===== 2012-04-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=4 VL-ID: ===== 4 Introduction: ============= We are pleased to announce the General Availability of the Astaro Command Center...

Astaro Gateway v7.504 - Multiple Web Vulnerabilities

Document Title: =============== Astaro Gateway v7.504 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=8 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 8 Common...

Astaro Gateway v7.504 - Multiple Web Vulnerabilities

Document Title: =============== Astaro Gateway v7.504 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=8 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 8 Common...

Astaro Command Center 2.x Cross Site Scripting

Title: ====== Astaro Command Center v2.x - Multiple Web Vulnerabilities Date: ===== 2012-04-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=4 VL-ID: ===== 4 Introduction: ============= We are pleased to announce the General Availability of the Astaro Command Center...

Astaro Command Center v2.x - Multiple Web Vulnerabilities

Document Title: =============== Astaro Command Center v2.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=4 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Astaro Command Center v2.x - Multiple Web Vulnerabilities

Document Title: =============== Astaro Command Center v2.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=4 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 4...