CVE-2018-17431

Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL...

App Layering 4.10 - Duplicate-computers-in-the-Sophos console

PROBLEM DESCRIPTION: Duplicate computers in the Sophos console Attaching screenshots of the behavior:...

Debian DSA-4373-1 : coturn - security update

Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. - CVE-2018-4056 A SQL injection vulnerability was discovered in the coTURN administrator web portal. As the administration web interface is shared with the production, it is unfortunately not possible to easily...

CVE-2019-1656

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation in the affected software. An...

Input validation

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation in the affected software. An...

Google URL Inspection Tool flaw lets anyone inspect URLs without authorization

By Waqas Last year, Google launched its URL Inspection Tool for webmasters using Search Console. The purpose of this tool is to provide information about Google's indexed version of a specific page. However, now, a UK-based Search Engine Optimization SEO specialist Oliver HG Mason has discovered...

CVE-2018-6443

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who...

The vulnerability of the file2strvec function in console applications for monitoring and terminating system processes in Props-ng allows a perpetrator to execute arbitrary code.

The vulnerability of the file2strvec function in console applications for monitoring and terminating system processes in Props-ng is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Joomla Core 3.9.1 - Persistent Cross-Site Scripting in Global Configuration Textfilter Settings

Exploit for php platform in category web applications Exploit Title: Joomla Global Configuration Text Filter settings Stored XSS Vulnerability Exploit Author: Praveen Sutar , Twitter: @praveensutar123 Vendor Homepage: https://www.joomla.org/ Affected Versions: Joomla versions 2.5.0 through 3.9.1...

SAP Management Console List Config Files

This module attempts to list the config files through the SAP Management Console SOAP Interface. Returns a list of config files found in the SAP configuration with its absolute paths inside the server filesystem. This module requires Metasploit: https://metasploit.com/download Current source:...

Unspecified Vulnerability in Oracle Java SE Java Advanced Management Console

Oracle Java SE is Oracle's suite of standard edition Java platforms for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. java Advanced Management Console is one of the Java Advanced Management Console components for creating...

Error: "An error occurred during refresh" when opening StoreFront console

An error occurred during refresh. System.InvalidOperationException: Sequence contains more than one element...

CVE-2019-2540

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2430

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety...

Code injection

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Design/Logic Flaw

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety...

CVE-2019-2540

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2540

CVE-2019-2540 affects Oracle Java SE’s Java Advanced Management Console (ACM) in the Server subcomponent, specifically version 2.12. The vulnerability is exploitable over the network by an unauthenticated attacker via multiple protocols and, in combination with user interaction, can lead to unaut...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37397)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Console subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37398)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Console subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...