Moxa OnCell Central Manager Software Arbitrary Code Execution Vulnerability

Moxa OnCell Central Manager Software is a suite of private IP management software from MOXA. The software supports the configuration, management and monitoring of remote devices over a private network. A security vulnerability exists in Moxa OnCell Central Manager Software prior to version 2.2,...

Moxa OnCell Central Manager Software Authentication Bypass Vulnerability

Moxa OnCell Central Manager Software is a suite of private IP management software from MOXA. The software supports the configuration, management and monitoring of remote devices over a private network. A security vulnerability exists in Moxa OnCell Central Manager Software prior to version 2.2. A...

Plugin Central <= 2.5 - Authenticated Reflected Cross-Site Scripting (XSS)

The Plugin Central WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Central Plugin <= 2.5 - Reflected Cross Site Scripting (XSS)

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Upgrade the plugin...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5451

HP Operations Orchestration Central 10.x before 10.22.001 is affected by an unspecified CSRF (XSRF) vulnerability that can allow an attacker to hijack the authentication of unspecified victims via unknown vectors. The affected product is HP OO 10.x; remediation approaches in the connected documen...

PT-2015-6918

Name of the Vulnerable Software and Affected Versions HP Operations Orchestration Central versions prior to 10.22.001 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. Recommendations For versions prior to 10.22.001, update to version...

CVE-2015-5451: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

APPLE-SA-2015-10-21-2 watchOS 2.0.1

APPLE-SA-2015-10-21-2 watchOS 2.0.1 watchOS 2.0.1 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, Apple Watch Edition, and Apple Watch Hermes Impact: Some cards may allow a terminal to retrieve limited recent transaction information when maki...

CVE-2015-6989

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

Memory corruption

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

Apple iOS < 9.1 Multiple Vulnerabilities

Binary data appleios91check.nbin...

CVE-2015-6989: Improper Restriction of Operations within the Bounds of a Memory Buffer

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

ManageEngine Desktop Central Tools Execution Status Update RCE (intrusive check)

The version of ManageEngine Desktop Central running on the remote host is affected by an unspecified remote code execution vulnerability in the system tools execution status updates due to a failure to properly sanitize user-supplied input. A remote, unauthenticated attacker can exploit this to...

Jasig / Apereo Central Authentication Service (CAS) Detection (HTTP)

HTTP based detection of the Apereo formerly Jasig Central Authentication Service CAS. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

Moxa OnCell Central Manager provides Web access to private IP network devices. A security vulnerability exists in the implementation of Moxa OnCell Central Manager's MessageBrokerServlet that fails to authenticate the user's identity before accepting commands, which can be exploited by an attacke...

PT-2015-3219

Name of the Vulnerable Software and Affected Versions Moxa OnCell Central Manager versions prior to 2.2 Description The issue is related to the MessageBrokerServlet servlet, which does not require authentication. This allows remote attackers to obtain administrative access via a command. For...

PT-2015-3220

Name of the Vulnerable Software and Affected Versions Moxa OnCell Central Manager versions prior to 2.2 Description The issue is related to a hardcoded root password in the login function of the RequestController class. This allows remote attackers to gain administrative access via a login sessio...

(0Day) Moxa OnCell Central Manager Server RequestController Static Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RequestController class. The specific flaw exists within the...

(0Day) Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MessageBrokerServlet servlet, which does not ensure a user is...