Cisco Unified Computing System B-Series Servers Privilege Escalation Vulnerability

Cisco Unified Computing System B-Series Blade Servers could allow an authenticated, local attacker to gain shell-level access to the affected device. The vulnerability is due to improper input validation in the ping6 and the traceroute6 commands. An attacker could exploit this vulnerability by...

F5 Networks BIG-IP : bzip2 vulnerability (SOL15878)

Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file. C Tenable Network Security, Inc. The descriptive te...

通达T9 oa系统sql注射12处打包(demo站点root权限)

简要描述： T9智能管理平台是基于B/S架构，灵活、稳定、安全、高性能的办公系统。采用自主研发的引擎技术，提供强大的工作流和公文流程管理功能，可完全根据客户需求定制办公门户平台。 详细说明： 测试地址 http://t9.go2oa.com/t9/core/frame/webos/index.jsp 测试帐号及密码 oa/无 注入1： 漏洞分析： url： http://t9.go2oa.com/t9/t9/core/funcs/message/weixunshare/act/T9WeiXunShareAct/getWeiXunById.act postdata: wxid=110'...

CVE-2014-7989

Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted 1 ping6 or 2 traceroute6 command, aka Bug ID CSCuq38176...

CVE-2014-7877

Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors...

CVE-2014-7877

Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors...

Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation

Challenge Inventory job or any tape jobs may fail with an error "Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation" You may find following entries in the Job..TapeVmBackup.log / Job..TapeFilesBackup or Job.Tapelibraryinventory.TapeInventory:...

awbtuning.nl XSS vulnerability

Vulnerable URL: http://www.awbtuning.nl/shop/pages/productview.php?chapter=1=64=%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:03 GMT Vulnerability type:|...

CVE-2012-5242

Banana Dance (Product: Banana Dance; Vendor: bananadance.org) is affected by CVE-2012-5242 and related issues in B.2.6 and earlier. The root causes include: PHP File Inclusion in functions/ajax.php/get_template flow and Directory Traversal via name parameter in get_template action; Improper Acces...

Information disclosure

The B&H Photo Video Pro Audio aka com.bhphoto application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7577

CVE-2014-7577 affects the B&H Photo Video Pro Audio Android app (com.bhphoto) 2.5.1. Root cause: the app does not verify X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and access sensitive information via crafted certificates. The connected documents corro...

CVE-2014-7577

The B&H Photo Video Pro Audio aka com.bhphoto application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-7874

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

HP Operations Manager 9.10 / 9.11 / 9.20 Multiple RCE

The version of HP Operations Manager for Unix installed on the remote host is 9.10, 9.11, or 9.20 without the vendor-supplied patches. It is, therefore, affected by multiple unspecified flaws that allow an unauthenticated, remote attacker to execute arbitrary code. C Tenable Network Security, Inc...

ecbuyers.com Open Redirect vulnerability

Vulnerable URL: http://www.ecbuyers.com/b2b/catalog/redirect.php?action=url=www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:02 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3385...

MIRcon 2014 – Day 1 Highlights

The first day of MIRcon 2014 is officially done and was packed with thought-provoking keynotes, presentations and a one-of-a-kind reception. While there's too much to fit into this blog post, I wanted to provide you with some of the highlights: FireEye's COO, Kevin Mandia kicked-off MIRcon and wa...

Cross site scripting

Cross-site scripting XSS vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter...

CVE-2014-4871

The CVE-2014-4871 vulnerability affects NetCommWireless NB604N routers (firmware prior to GAN5.CZ56T-B-NC.AU-R4B030.EN). A stored XSS flaw exists in wlsecurity.html via the wlWpaPsk parameter, allowing an attacker to inject scripts that run in an authenticated user’s context. Reported base CVSS ~...

CVE-2014-4871

Cross-site scripting XSS vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter...