Appweb < 7.0.3 authCondition Authentication Bypass Vulnerability

According to its banner, the version of Appweb installed on the remote host is prior to 7.0.3. It is, therefore, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types. Note...

CVE-2018-18725

An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5...

YUNUCMS cross-site scripting vulnerability (CNVD-2018-23277)

YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 admin/banner/editbanner?id=20 cross-site scripting vulnerability , attackers can exploit the vulnerability of cross-site attacks...

CVE-2018-18725: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5...

PT-2018-14603

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description A cross-site scripting XSS issue was found. The issue is related to the "admin/banner/editbanner?id=20" API endpoint. Recommendations For YUNUCMS version 1.1.5, update to a version that includes a fix for this...

Hikvision IP Camera Detection (HTTP)

HTTP based detection of Hikvision IP camera devices. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PostgreSQL 'Interactive Installer' Arbitrary Code Execution Vulnerability - Windows

PostgreSQL is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Asterisk 13.x < 13.23.1 / 14.x < 14.7.8 / 15.x < 15.6.1 / 13.21 < 13.21-cert3 HTTP Websocket Stack Overflow (AST-2018-009)

According to its SIP banner, the version of Asterisk running on the remote host is 13.x prior to 13.23.1, 14.x prior to 14.7.8, 15.x prior to 15.6.1, or 13.21 prior to 13.21-cert3. It is therefore, affected by an error related to the reshttpwebsocket.so module that allows a stack overflow error a...

CVE-2018-14803

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and software components, via the HTTP response header that is normally not available to t...

CVE-2018-14803

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and software components, via the HTTP response header that is normally not available to t...

CVE-2018-14803

Philips e-Alert Unit (non-medical device), Version R2.1 and prior, is affected by CVE-2018-14803 which describes an information-disclosure vulnerability: an attacker could obtain extraneous product information (e.g., OS/software components) via HTTP response headers that are normally not exposed....

CVE-2018-14803: Exposure of Sensitive Information to an Unauthorized Actor

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and software components, via the HTTP response header that is normally not available to t...

Cisco Video Surveillance Manager Detection

Detection of Cisco Video Surveillance Manager. The script sends a connection request to the server and attempts to detect Cisco Video Surveillance Manager and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

PT-2018-12738

Name of the Vulnerable Software and Affected Versions Philips e-Alert Unit non-medical device versions R2.1 and prior Description The Philips e-Alert contains a banner disclosure issue that could allow attackers to obtain extraneous product information, such as the operating system and software...

kofferprofi.de XSS vulnerability

Open Bug Bounty ID: OBB-678982 Description| Value ---|--- Affected Website:| kofferprofi.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Elastic Elasticsearch 'CVE-2018-3831' Information Disclosure Vulnerability - Linux

Elasticsearch is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PowerDNS Security Advisory 2016-02: Crafted queries can cause abnormal CPU usage

An issue has been found in PowerDNS allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS queries, which might result in a partial denial of service if the system becomes overloaded. SPDX-FileCopyrightText: 2018 Greenbone AG...

PacsOne Detection

Detection of PacsOne Server. The script sends a connection request to the server and attempts to detect PacsOne Server and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Infoblox NetMRI Administration Shell Escape and Privilege Escalation Vulnerability

The administrative shell of Infoblox NetMRI is prone to shell escape and privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Red Hat OpenShift Detection (HTTP)

HTTP based detection of Red Hat OpenShift. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.141450...