CVE-2018-3699

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access...

CVE-2018-3699

CVE-2018-3699 is an Intel-affecting vulnerability in the Intel® RAID Web Console v3 for Windows. The issue is described as a cross-site scripting (XSS) vulnerability that may allow an unauthenticated user to elevate privileges via remote access. Affected product: Intel® RAID Web Console 3; vulner...

CVE-2018-3699

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access...

CVE-2018-3696

Intel® RAID Web Console 3 for Windows* (Windows, affected version before 4.186) is vulnerable to an authentication bypass that could allow an unprivileged user with local access to potentially gain administrative privileges. The issue is documented in CVE-2018-3696 and Intel’s advisory INTEL-SA-0...

CVE-2018-2483

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console CMC by changing request method...

CVE-2018-2483

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console CMC by changing request method...

CVE-2018-2483

SAP BusinessObjects BI Platform CMC (versions 4.1 and 4.2) is affected by HTTP Verb Tampering caused by how request methods can be manipulated. Vulnerable component: Central Management Console. Reported impact includes bypassing security restrictions and tampering with HTTP verbs. No explicit exp...

xorg-x11-server < 1.20.1 - Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits Exploit Title: xorg-x11-server bolo console opened Building root shell wait 2 minutes crontab overwritten ... cut Xorg output ... Xorg killed II Server terminated successfully 0. Closing log file. Don't forget to cleanup /etc/crontab and /tmp...

Elasticsearch Kibana Console Plugin Command Execution Vulnerability

Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from the Dutch company Elasticsearch.Console is one of the console plug-ins. A security vulnerability exists in the Console plugin in...

Intel® RAID Web Console 3 Cross-site Scripting Vulnerability Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console RWC may allow remote manipulation of RWC console output. Intel is releasing RAID Web Console updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3699 Description: Cross-site scripting i...

Intel® RAID Web Console 3 for Windows* Authentication Bypass Advisory

Summary: A potential security vulnerability in Intel® RAID Web Console 3 for Windows may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3696 Description: Authentication bypass in the IntelR RAID We...

xorg-x11-server 1.20.1 - Local Privilege Escalation

xorg-x11-server 1.20.1 - Local Privilege Escalation Exploit Title: xorg-x11-server bolo console opened Building root shell wait 2 minutes crontab overwritten ... cut Xorg output ... Xorg killed II Server terminated successfully 0. Closing log file. Don't forget to cleanup /etc/crontab and /tmp di...

Oracle WebLogic Server Administration Console Detected

Oracle WebLogic Server administration console has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative...

CVE-2018-15394

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

Authentication flaw

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

CVE-2018-15394 Cisco Stealthwatch Management Console Authentication Bypass Vulnerability

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

Arbitrary File Inclusion

kibana is vulnerable to arbitrary file inclusion attacks. The vulnerability exists through the Kibana Console API where a request can be sent to include external JS files which could possibly result in executing arbitrary commands...

Cisco Stealthwatch Management Console Backup Authentication Bypass Vulnerability

Cisco Stealthwatch Management Console is a data collection and analysis device from cisco. Cisco Stealthwatch Management Console has a share validation bypass vulnerability that is caused by an insecure system configuration. An attacker can exploit this vulnerability by sending a crafted HTTP...

Cisco Stealthwatch Management Console Authentication Bypass Vulnerability

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

CVE-2018-17246

Kibana, before 6.4.3 and 5.6.13, contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript code. This could possibly lead to an attacker executing arbitrary commands with permissio...