CVE-2018-10078

Cross-site scripting XSS vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description...

CVE-2018-10176

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

CVE-2018-10077

XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...

CVE-2018-10173

CVE-2018-10173 affects Digital Guardian Management Console 7.1.2.0015 and enables authenticated remote code execution via an Arbitrary File Upload vulnerability. The NVD entry documents a NETWORK attack with LOW attack complexity and no user interaction, resulting in high impact (C/H/I/A: HIGH). ...

CVE-2018-10174

The CVE concerns Digital Guardian Management Console 7.1.2.0015 with a server-side request forgery (SSRF) vulnerability. The issue lets remote attackers induce the console to access file:// URLs to read arbitrary files, and to send TCP traffic to intranet hosts or obtain NTLM hashes, even when th...

CVE-2018-10077

Geist WatchDog Console 3.2.2 is affected by an XML External Entity (XXE) vulnerability that allows a remote authenticated administrator to read arbitrary files via crafted XML data. The issue is documented across multiple sources (e.g., NVD entry CVE-2018-10077, CNVD-2018-09907) and specifically ...

CVE-2018-10078

Geist WatchDog Console 3.2.2 is affected by CVE-2018-10078, a cross-site scripting (XSS) vulnerability that lets remote authenticated administrators inject arbitrary web script or HTML via the server description. The known context, per the CVE entry, identifies the affected software as Geist Watc...

CVE-2018-10079

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating 1 config.xml or 2 servers.xml...

CVE-2018-10173

Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...

CVE-2018-10175

Digital Guardian Management Console 7.1.2.0015 has an XXE issue...

CVE-2018-10176

The CVE-2018-10176 entry concerns Digital Guardian Management Console 7.1.2.0015, which exposes a directory traversal vulnerability enabling an attacker to read arbitrary files on the server. Publicly documented details come from CNVD-2018-08777, which explicitly describes a path traversal flaw i...

Sandcat Browser 6.0 - Pentest And Developer-Oriented Web Browser

Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and pen-testers and...

CVE-2018-2824

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2829

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2833

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2018-2824

Affected product/component: Oracle Hospitality Simphony, Enterprise Management Console (EMC). Vulnerability details: A vulnerability exists in Simphony with affected versions 2.8, 2.9 and 2.10. It is exploitable by a low-privilege attacker who can access the system over HTTP, potentially compromi...

CVE-2018-2833

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

Geist WatchDog Console 3.2.2 XSS / XML Injection / Insecure Permissions

Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage: http://www.itwatchdogs.com/ Version: 3.2.2 Software Link:...

Cross site scripting

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...

CVE-2018-1000163

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...