76 matches found
How to block MAM URL access through Browser
Accessing the MAM URL directly through browser prompts the users to enter their AD Credentials. It acts as a tool for users to validate their credentials Username/Password. Some might treat this as a Security Violation. This article helps you to restrict the Browser access to MAM URL NetScaler...
Article Directory Script Seo 3.2 - Improper Access Restrictions Vulnerability
Exploit for php platform in category web applications Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://www.e-soft24.com/ Script Name: Article Directory Script Seo Script Version: V3.2 Script Buy Now: http://www.e-soft24.com/article-directory-script-seo-p-338.ht...
MC Real Estate Pro Script - Improper Access Restrictions
Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Real Estate Pro Script Buy Now: http://microcode.ws/product/mc-real-estate-pro-php-script/3858 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet Direc...
Article Directory Script Seo 3.2 - Improper Access Restrictions
Article Directory Script Seo 3.2 - Improper Access Restrictions Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://www.e-soft24.com/ Script Name: Article Directory Script Seo Script Version: V3.2 Script Buy Now:...
NetScaler: Error - "your apps are not available at this time" when login from Receiver
NetScaler: Error - "your apps are not available at this time" when login from Receiver. This occurs when going via the NetScaler gateway . Direct access to SF works fine, as well as browser access to gateway works fine...
ZKTeco ZKAccess Security System 5.3.1 - stored XSS
Application description ZKAccess systems are built on flexible, open technology to provide management, real-time monitoring and control of your access control changes, access via a browser,without the need to install additional software. Security infrastructure devices centralized management,...
Design/Logic Flaw
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000...
sugar crm 5.5.0.rc2 and 5.2.0j Multiple Vulnerabilities
No description provided by source. Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection vulnerabilities 2. Multiple...
phpliteadmin <= 1.9.3 - Remote PHP Code Injection Vulnerability
No description provided by source. Exploit Title: phpliteadmin = 1.9.3 Remote PHP Code Injection Vulnerability Google Dork: inurl:phpliteadmin.php Default PW: admin Date: 01/10/2013 Exploit Author: L@usch - http://la.usch.io - http://la.usch.io/files/exploits/phpliteadmin-1.9.3.txt Vendor Homepag...
F*EX 20140313-1 HTTP Response Splitting / Cross Site Scripting
FEX version 20140313-1 suffers from HTTP response splitting and cross site scripting vulnerabilities. FEX Frams' Fast File EXchange - Multiple Issues - - --------------------------------------------------------------------- Affected Versions ================= FEX Frams' Fast File EXchange...
CVE-2013-0523
IBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x through 7.0.0.7 does not use a suitable encryption algorithm for storefront web requests, which allows remote attackers to obtain sensitive information via a padding oracle attack that targets certain UTF-8...
PHP Lite Admin 1.9.3 Code Injection
Exploit Title: phpliteadmin phpliteadmin.php1785: 'When you create a new database, the name you entered will be appended with the appropriate file extension .db, .db3, .sqlite, etc. if you do not include it yourself. The database will be created in the directory you specified as the $directory...
Gnome GDM information leak
Under some conditions it's possible to launch broser to access some files...
Multiple Snap Appliance (SnapServer) Bypass Vulnerabilities
Exploit Title: Multiple Snap Appliance SnapServer Vulnerabilities Date: 13-02-2011 Author: SeeMe Vendor Link: http://www.overlandstorage.com/ Effected Versions: N/A Multiple SnapAppliance SnapServer suffers from Multi-vulnerabilities which allows unprivileged users to view and modify Storage-Data...
Firefox Denial Of Service
From the very-low-hanging-fruit-department Firefox Denial of Service KEYGEN Release mode: Forced release. Ref : TZO-27-2009 - Firefox Denial of Service KEYGEN WWW : http://blog.zoller.lu/2009/04/advisory-firefox-denial-of-service.html Vendor : http://www.firefox.com Status : No patch CVE : none...
BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure
BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account...