CVE-2018-14890

Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting XSS vulnerability in the Web Management Console...

CVE-2018-14891

The CVE-2018-14891 entry concerns the Management Console of Vectra Networks Cognito Brain and Sensor prior to version 4.3, with a local privilege escalation vulnerability. Affected product: Cognito Brain and Sensor management console. Vulnerability: local privilege escalation; root cause details ...

CVE-2018-11786

In Karaf prior to version 4.2.0, arbitrary file read and write, in additional to arbitrary command execution, is possible via the Karaf ssh console, if enabled...

Citrix Studio/StoreFront consoles stuck on "Expanding"

Citrix Studio Console which is installed on Delivery Controller cannot be launched. It stuck on "Expand" window. If we launch MMC on the DDC and try to launch Studio it gets stuck at “Assessing databases”...

Arbitrary File Read And Write

org.apache.karaf.shell.core is vulnerable to arbitrary file read and write. A user with rights to the Karaf console is able to read or write any file on the file system, which would allow an attacker with access to the sshd service to abuse the vulnerability to read or write arbitrary files on th...

Veeam Service Provider Console – Compile and Upload Management Agent Logs

Challenge This article covers how to Management Agent logs for both client agents and the Cloud Connect agent. Solution Export Management Agent Logs To export Veeam Service Provider Console Management Agent logs for one or more client agents, please: 1. Log into the Veeam Service Provider Console...

Veeam Service Provider Console – Compile and Upload Server Logs

Purpose This article provides information about collecting Veeam Service Provider Console logs. Solution The log collection procedure for Veeam Service Provider Console is documented in the User Guide: Downloading Veeam Service Provider Console Logs Tip: Use the Archive button in the top-right of...

Veeam Service Provider Console – Compile and Upload ConnectWise Manage Plugin Logs

This article covers how to properly compile your Veeam Service Provider Console ConnectWise Manage Plugin logs...

CVE-2018-11787

CVE-2018-11787 affects Apache Karaf prior to 3.0.9, 4.0.9 and 4.1.1 where the webconsole opens a Gogo shell and, if Pax Web Extender Whiteboard is present, an unauthenticated /gogo URL can expose the Karaf console. Direct access to /system/console/gogo also requires authentication, but the /gogo ...

SynaMan 4.0 build 1488 - Authenticated Cross-Site Scripting Vulnerability

Exploit for windows platform in category web applications Exploit Author: bzyo CVE: CVE-2018-10763 Twitter: @bzyo Exploit Title: SynaMan 4.0 - Authenticated Cross Site Scripting XSS Vulnerable Software: SynaMan 4.0 build 1488 Vendor Homepage: http://web.synametrics.com/SynaMan.htm Version: 4.0...

Apache Struts 2 OGNL Console Detected

Apache Struts 2 installed on the remote host is running a OGNL console. While this environment can help speed up development of web applications, it can leak information about the underlying web applications as well as the installation of Struts, Java, and other related items on the remote host a...

SynaMan 4.0 build 1488 - (Authenticated) Cross-Site Scripting

Exploit Author: bzyo CVE: CVE-2018-10763 Twitter: @bzyo Exploit Title: SynaMan 4.0 - Authenticated Cross Site Scripting XSS Date: 09-12-18 Vulnerable Software: SynaMan 4.0 build 1488 Vendor Homepage: http://web.synametrics.com/SynaMan.htm Version: 4.0 build 1488 Software Link:...

SynaMan 4.0 Build 1488 Cross Site Scripting

Exploit Author: bzyo CVE: CVE-2018-10763 Twitter: @bzyo Exploit Title: SynaMan 4.0 - Authenticated Cross Site Scripting XSS Date: 09-12-18 Vulnerable Software: SynaMan 4.0 build 1488 Vendor Homepage: http://web.synametrics.com/SynaMan.htm Version: 4.0 build 1488 Software Link:...

SynaMan 4.0 build 1488 - (Authenticated) Cross-Site Scripting

SynaMan 4.0 build 1488 - Authenticated Cross-Site Scripting Exploit Author: bzyo CVE: CVE-2018-10763 Twitter: @bzyo Exploit Title: SynaMan 4.0 - Authenticated Cross Site Scripting XSS Date: 09-12-18 Vulnerable Software: SynaMan 4.0 build 1488 Vendor Homepage: http://web.synametrics.com/SynaMan.ht...

CVE-2018-10937

A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim...

CVE-2018-10937

CVE-2018-10937 describes a cross-site scripting flaw in the tetonic-console component of OpenShift Container Platform 3.11. An attacker who can create pods can leverage this flaw to act on the Kubernetes API as the victim, implying potential privilege abuse within the cluster. The description doe...

How Live Query Will Change The Way You Do Vulnerability Management

It’s no secret that, without the right set of tools, vulnerability management can be tedious and exhausting. With slow, manual processes it can take weeks to identify and remediate issues. And the work itself is often dull, sifting and searching without yielding real results. Live Query...

Opsview Monitor Cross-Site Scripting Vulnerability

Opsview Monitor is a virtual appliance designed to be deployed in an organization's network infrastructure. It is bundled with a Web management console for monitoring and managing hosts and their services. Opsview Monitor suffers from a cross-site scripting vulnerability that can be exploited by ...

Opsview Monitor Command Execution Vulnerability (CNVD-2018-17452)

Opsview Monitor is a virtual appliance designed to be deployed in an organization's network infrastructure. It is bundled with a Web management console for monitoring and managing hosts and their services. Opsview Monitor has a command execution vulnerability that allows an attacker to gain acces...

Unable to publish image, out of disk space, ELM console reports "No free mft record for $MFT: No space left on device"

When publishing an image, the task fails with the message, "A failure occurred while publishing the Layered Image: An error occurred while compositing the layer or image. Please check the available disk space on the local storage or the size of the target image." Also, in the ELM console, you mig...