5247 matches found
bziran.com XSS vulnerability
Vulnerable URL: http://www.bziran.com/adsregister.php?AdsID=1"RootByte Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 20:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100610 Google Pagerank| 0 VIP websit...
Gold Partner: security researchers discovered Flash 0day vulnerability with BEDEP virus there is a close Association-vulnerability warning-the black bar safety net
2 0 1 5 year at the beginning of the Adobe Flash sequential burst more0dayvulnerability, and has not been repaired when it waslarge-scale malicious usethe. Recently, Trend Micro security researchers in Adobe 0day vulnerabilities in the tracking survey, found BEDEP series virus with the Adobe Flas...
CVE-2014-10019
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
CVE-2014-10018
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
CVE-2014-10018
CVE-2014-10018 is an XSS vulnerability in the Teracom T2-B-Gawv1.4U10Y-BI modem, specifically in webconfig/wlan/country.html/country, where the essid parameter can be manipulated to inject arbitrary web script or HTML. The connected records confirm only the generic description and lack explicit t...
CVE-2014-10018
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
CVE-2014-10019
The CVE-2014-10019 entry concerns CSRF vulnerabilities in Teracom T2-B-Gawv1.4U10Y-BI modem, specifically in webconfig/wlan/country.html/country. An attacker could remotely hijack administrator authentication to perform requests that (1) change the SSID or (2) change the password via crafted requ...
CVE-2014-10019
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
Release Notes for Veeam Backup & Replication 8.0 Patch 1
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 1 Cause Please confirm you are running version 8.0.0.807, 8.0.0.817 or 8.0.0.831 prior to installing...
CVE-2014-7879
CVE-2014-7879 – HP-UX PAM bypass . Affected: HP-UX B.11.11, B.11.23, and B.11.31 when pam.conf uses libpam_updbe. Root cause: a flaw in pam_updbe handling allows remote authenticated users to bypass authentication and execute arbitrary code via unspecified vectors. CVSS base score in the HP bulle...
Cisco Unified Computing System B-Series Servers Privilege Escalation Vulnerability
Cisco Unified Computing System B-Series Blade Servers could allow an authenticated, local attacker to gain shell-level access to the affected device. The vulnerability is due to improper input validation in the ping6 and the traceroute6 commands. An attacker could exploit this vulnerability by...
F5 Networks BIG-IP : bzip2 vulnerability (SOL15878)
Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file. C Tenable Network Security, Inc. The descriptive te...
通达T9 oa系统sql注射12处打包(demo站点root权限)
简要描述: T9智能管理平台是基于B/S架构,灵活、稳定、安全、高性能的办公系统。采用自主研发的引擎技术,提供强大的工作流和公文流程管理功能,可完全根据客户需求定制办公门户平台。 详细说明: 测试地址 http://t9.go2oa.com/t9/core/frame/webos/index.jsp 测试帐号及密码 oa/无 注入1: 漏洞分析: url: http://t9.go2oa.com/t9/t9/core/funcs/message/weixunshare/act/T9WeiXunShareAct/getWeiXunById.act postdata: wxid=110'...
CVE-2014-7989
Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted 1 ping6 or 2 traceroute6 command, aka Bug ID CSCuq38176...
CVE-2014-7877
Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors...
CVE-2014-7877
Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors...
Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation
Challenge Inventory job or any tape jobs may fail with an error "Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation" You may find following entries in the Job..TapeVmBackup.log / Job..TapeFilesBackup or Job.Tapelibraryinventory.TapeInventory:...
awbtuning.nl XSS vulnerability
Vulnerable URL: http://www.awbtuning.nl/shop/pages/productview.php?chapter=1=64=%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:03 GMT Vulnerability type:|...