CVE-2015-4286

CVE-2015-4286 affects Cisco UCS Central Software (web framework) 1.3(0.99). A directory traversal vulnerability allows an unauthenticated, remote attacker to read arbitrary files by sending a crafted HTTP request. Root cause cited as improper input validation. Impact is exposure of sensitive info...

PT-2015-1682

Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software version 1.30.99 Description The issue allows remote attackers to read arbitrary files via a crafted HTTP request. This is due to insufficient input validation in the web framework of the Cisco UCS Central operating...

CVE-2015-4286: Improper Input Validation

The web framework in Cisco UCS Central Software 1.30.99 allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377...

Cisco UCS Central Software File Access Vulnerability

A vulnerability in the web framework of the Cisco UCS Central Software could allow an unauthenticated, remote attacker to download arbitrary files from a targeted device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

SolarWinds N-Able N-Central Information Disclosure Vulnerability

SolarWinds N-Able N-Central is a suite of agent-based enterprise support and management solutions from SolarWinds USA. A information disclosure vulnerability exists in SolarWinds N-Able N-Central versions prior to 9.5.1.4514, which can be exploited to obtain a plaintext domain administrator...

Design/Logic Flaw

The RSM aka RSMWinService service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier for remote authenticated users to obtain the cleartext domain-administrator password by locating the encrypted...

CVE-2015-5610

The RSM aka RSMWinService service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier for remote authenticated users to obtain the cleartext domain-administrator password by locating the encrypted...

CVE-2015-5610

The RSM aka RSMWinService service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier for remote authenticated users to obtain the cleartext domain-administrator password by locating the encrypted...

CVE-2015-5610

SolarWinds N-Able N-Central (RSMWinService) is affected by CVE-2015-5610. The RSM service before version 9.5.1.4514 uses the same password decryption key across different customer installations, enabling remote authenticated users to obtain the plaintext domain-administrator password by locating ...

PT-2015-6984

Name of the Vulnerable Software and Affected Versions SolarWinds N-Able N-Central versions prior to 9.5.1.4514 Description The issue allows remote authenticated users to obtain the cleartext domain-administrator password. This is possible because the RSM service uses the same password decryption...

CVE-2015-5610: Exposure of Sensitive Information to an Unauthorized Actor

The RSM aka RSMWinService service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier for remote authenticated users to obtain the cleartext domain-administrator password by locating the encrypted...

SAP Enterprise Central Component Privilege Vulnerability

SAP is short for "System Applications and Products", which is the software name of SAP's product, Enterprise Management Solutions. An untrustworthy search path vulnerability exists in SAP ECC, which can be exploited by a local attacker to gain privileges via a Trojan horse...

N-Able RSMWinService contains hard coded security constants allowing decryption of domain administrator password

Overview SolarWinds N-Able N-Central is an agent-based enterprise support and management solution. N-Able N-Central contains several hard-coded encryption constants in the web interface that allow decryption of the password when combined. Description CWE-547: Use of Hard-coded, Security-relevant...

Design/Logic Flaw

Untrusted search path vulnerability in SAP Enterprise Central Component ECC allows local users to gain privileges via a Trojan horse program...

CVE-2015-3621

CVE-2015-3621 describes an untrusted search path vulnerability in SAP Enterprise Central Component (ECC) that enables local privilege escalation via a Trojan horse program. The NVD entry summarizes that untrusted search paths allow local users to gain privileges, with a high severity (CVSS v2 bas...

CVE-2015-3621: Improper Input Validation

Untrusted search path vulnerability in SAP Enterprise Central Component ECC allows local users to gain privileges via a Trojan horse program...

PT-2015-6242

Name of the Vulnerable Software and Affected Versions SAP Enterprise Central Component ECC affected versions not specified Description The issue is related to an untrusted search path vulnerability. It allows local users to gain privileges via a Trojan horse program. Recommendations At the moment...

Symantec Endpoint Protection 12.1.4013 Service Disabling Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: Antivirus Google Dork: intitle: Antivirus Date: 2015-07-07 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.symantec.com Software Link: www.symantec.com/endpoint-protection Version:12.1.401...

PT-2015-3321

Name of the Vulnerable Software and Affected Versions ManageEngine Desktop Central versions prior to 9 build 91093 Description The issue is related to the FileUploadServlet class in ManageEngine Desktop Central, which lacks restrictions on file uploads. This can be exploited by a remote,...

ManageEngine Desktop Central MSP < 9.0.075 Arbitrary Code Execution Vulnerability

ManageEngine Desktop Central MSP is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...