CVE-2018-14328

CVE-2018-14328 affects Brynamics “Online Trade” (online trading/cryptocurrency investment system). Connected sources confirm information disclosure via direct requests to endpoints such as /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, and /privacy&terms, leaking sensit...

PT-2018-12443

Name of the Vulnerable Software and Affected Versions Brynamics Online Trade affected versions not specified Description The issue allows remote attackers to obtain sensitive information via a direct request for specific API endpoints, including "/dashboard/addplan",...

Kubernetes Dashboard Public WAN (Internet) / Public LAN Accessible

The script checks if the Kubernetes Dashboard UI is accessible from a public WAN Internet / public LAN. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2018-0344

A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient...

CVE-2018-0344

A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient...

IBM InfoSphere Data Replication Dashboard SQL Injection Vulnerability

IBM InfoSphere Data Replication Dashboard is a data synchronization solution from IBM USA. The solution enables log-based data change capture through real-time replication and provides features such as trusted data integration and synchronization. A SQL injection vulnerability exists in IBM...

CVE-2018-0344: Improper Neutralization of Special Elements used in a Command

A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient...

IBM InfoSphere Data Replication Dashboard Path Traversal Vulnerability

IBM InfoSphere Data Replication Dashboard is a data synchronization solution from IBM USA. The solution enables log-based data change capture through real-time replication and provides features such as trusted data integration and synchronization. A directory traversal vulnerability exists in IBM...

Kubernetes Dashboard UI Detection

Detection of Kubernetes Dashboard/Web UI. The script sends a connection request to the server and attempts to detect Kubernetes Dashboard UI and to extract its version if possible. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

Sql injection

SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116...

Directory traversal

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

CVE-2013-3001

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

CVE-2013-3001

Summary: CVE-2013-3001 refers to a directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard (versions 9.7 and 10.1). The root cause is a path traversal flaw that could allow a remote attacker to read arbitrary files on the system via crafted requests. Affected products/versi...

CVE-2013-2999

The IBM Security Bulletin for CVE-2013-2999 confirms an XSS vulnerability in InfoSphere Data Replication Dashboard (affecting versions 9.7 and 10.1). The issue arises from improper validation of user-supplied input in the dashboard, enabling a remote attacker to inject arbitrary web script or HTM...

CVE-2013-3000

CVE-2013-3000 concerns IBM InfoSphere Data Replication Dashboard (versions 9.7 and 10.1). The connected IBM bulletin confirms a SQL injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands via crafted input, potentially reading or modifying replication-control ...

PT-2018-4086

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Data Replication Dashboard versions 9.7 through 10.1 Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For IBM InfoSphere Data Replication Dashboard versions 9.7 through 10....

CVE-2013-2999: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115...

PT-2018-4084

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Data Replication Dashboard versions 9.7 through 10.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 9.7 through 10.1, update to a version...

CVE-2013-3000: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116...

CVE-2013-3001: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...