7082 matches found
CVE-2018-0474
Cisco Unified Communications Manager contains a vulnerability in its web-based management interface where saved passwords are inappropriately included in configuration pages, allowing an authenticated remote attacker to view digest credentials by inspecting page source. This could enable password...
CVE-2018-0474 Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...
CVE-2018-0474 Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...
Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2019-01372)
Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution. An information disclosure vulnerability exists in the web-based...
UBUNTU-CVE-2018-16071
A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...
Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...
Secure channel communications stop working after disabling TLS 1.0/1.1
After disabling TLS 1.0/1.1, Veeam functionality which utilizes the SCHANNEL security provider, such as license auto-update, license usage reporting and Veeam explorers with remote mounts stop working...
internet-communications.infojoker.bg XSS vulnerability
Open Bug Bounty ID: OBB-714275 Description| Value ---|--- Affected Website:| internet-communications.infojoker.bg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79...
Hacking Diplomatic Cables Is Expected. Exposing Them Is Not
Spies try to access government communications all the time. But an incident this week tested the limits of what happens when those compromises get discovered...
Satellite communications equipment security
Introduction Satcoms are the game changer in maritime cyber security. In the past, satellite connectivity was so expensive as to be prohibitive for all but the most essential communication. Crew personal email and social media access was a pipe dream. However, now that ship operators have access ...
Microsoft Releases December 2018 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker could exploit some of these vulnerabilities to obtain access to sensitive information. The National Cybersecurity and Communications Integration Center NCCIC, part of the Cybersecurity and...
Man-in-the-Middle (MitM)
github.com/hashicorp/consul is vulnerable to man-in-the-middle. The agent-to-agent RPC communication does not verify the hostname of outgoing connections which results in an insecure plaintext communications channel. This allows an attacker to perform a man-in-the-middle attack against vulnerable...
The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary code.
The vulnerability of the Cisco Unified Communications Manager web interface is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely using a specially crafted link...
Huawei FusionSphere OpenStack Information Disclosure Vulnerability
Huawei FusionSphere OpenStack is a suite of FusionSphere cloud operating system cloud platform software for ICT scenarios from Huawei, China. An information disclosure vulnerability exists in Huawei FusionSphere OpenStack. Due to insufficient protection of service-specific communications, a remot...
CVE-2018-3947
An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability...
RHEL 7 : kernel (RHSA-2018:3083)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3083 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A flaw named FragmentSmack was found i...
Modbus Slave PLC 7 - .msw Buffer Overflow Exploit
Exploit for windows platform in category local exploits Exploit Title: Modbus Slave PLC 7 - '.msw' Buffer Overflow PoC Author: Kağan Çapar Software Link: https://www.modbustools.com/download/ModbusSlaveSetup32Bit.exe Vendor Homepage : https://www.modbustools.com Tested Version: 7 Tested on OS:...
healthcare-communications.imedpub.com XSS vulnerability
Open Bug Bounty ID: OBB-691134 Description| Value ---|--- Affected Website:| healthcare-communications.imedpub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79...
FasterXML Jackson-databind Polymorphic Deserialization Multiple Security Vulnerability
Description FasterXML Jackson-databind is prone to multiple security vulnerabilities. Successfully exploiting these issues may allow an attacker to execute arbitrary code, bypass certain security restrictions, perform unauthorized actions or obtain potentially sensitive information. Failed exploi...