CVE-2018-2833

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2018-2824

Affected product/component: Oracle Hospitality Simphony, Enterprise Management Console (EMC). Vulnerability details: A vulnerability exists in Simphony with affected versions 2.8, 2.9 and 2.10. It is exploitable by a low-privilege attacker who can access the system over HTTP, potentially compromi...

CVE-2018-2833

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

Geist WatchDog Console 3.2.2 XSS / XML Injection / Insecure Permissions

Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage: http://www.itwatchdogs.com/ Version: 3.2.2 Software Link:...

Cross site scripting

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...

CVE-2018-1000163

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...

CVE-2018-1000163

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...

CVE-2018-1000163

Floodlight web console contains a Cross Site Scripting (XSS) flaw in version 1.2 and earlier. The vulnerability allows JavaScript injections when a victim browses the web console. Connected sources corroborate the XSS description but do not provide concrete exploit details, affected file paths, o...

CVE-2018-1000163

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2018-09083)

Oracle Hospitality Simphony provides a modern user experience that delivers relevant information to guests through smooth, real-time tiled presentations. An unspecified vulnerability exists in the Enterprise Management Console component in Oracle Hospitality Simphony. An attacker could exploit th...

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2018-09082)

Oracle Hospitality Simphony provides a modern user experience that delivers relevant information to guests through smooth, real-time tiled presentations. An unspecified vulnerability exists in the Enterprise Management Console component in Oracle Hospitality Simphony. An attacker could exploit th...

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage: http://www.itwatchdogs.com/ Version: 3.2.2 Software Link:...

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2018-09084)

Oracle Hospitality Simphony provides a modern user experience that delivers relevant information to guests through smooth, real-time tiled presentations. An unspecified vulnerability exists in the Enterprise Management Console component of Oracle Hospitality Simphony. An attacker could exploit th...

Digital Guardian Management Console 7.1.2.0015 Shell Upload

Title: Digital Guardian Managment Console - Arbitrary File Upload Leading To Remote Code Execution RCE Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10173 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============...

Unspecified Vulnerability in Oracle Hospitality Simphony First Edition (CNVD-2018-09080)

Oracle Hospitality Simphony First Edition is an enterprise hospitality management platform that delivers point-of-sale POS and back-office functionality on fixed and mobile devices to support stadiums, arenas and other food and beverage operations. An unspecified vulnerability exists in the...

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage:...

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage:...

CVE-2017-6323

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...

Server side request forgery (ssrf)

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...

CVE-2017-6323

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...