Faraday Beta v3.0 - Collaborative Penetration Test and Vulnerability Management Platform

This new version has made major architectural changes to adapt the software to the new challenges of cybersecurity. It focuses on processing large volumes of data and facilitating user interaction with Faraday in their environment. Faraday just got much faster Architecture changes and a new...

CVE-2018-10076

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality the search box of the Dashboard...

Cross site scripting

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality the search box of the Dashboard...

CVE-2018-10076: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality the search box of the Dashboard...

PT-2018-9661

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine EventLog Analyzer version 11.12 Description: A Cross-Site Scripting issue allows a remote attacker to inject arbitrary web script or HTML via the search functionality, specifically the search box of the Dashboard...

CVE-2018-12908: Exposure of Sensitive Information to an Unauthorized Actor

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials...

PT-2018-11465

Name of the Vulnerable Software and Affected Versions Brynamics Online Trade affected versions not specified Description The issue allows remote attackers to obtain sensitive information by making a direct request for the "/dashboard/deposit" API endpoint. This could potentially lead to the...

CVE-2018-12522

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /style/ provides a directory listing...

CVE-2018-12525

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /images/ provides a directory listing...

Design/Logic Flaw

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /images/ provides a directory listing...

CVE-2018-12524

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /lib/ provides a directory listing...

CVE-2018-12525

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /images/ provides a directory listing...

CVE-2018-12522

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /style/ provides a directory listing...

CVE-2018-12523

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /etc/ provides a directory listing...

CVE-2018-12524

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /lib/ provides a directory listing...

CVE-2018-12523

PerfSONAR MaDDash 2.0.2 contains an information disclosure vulnerability: a direct request to /etc/ exposes a directory listing. Affected component is the MaDDash web UI (maddash-webui) handling /etc/. The issue allows enumeration of internal files and directories, which could reveal sensitive in...

CVE-2018-12523: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /etc/ provides a directory listing...

PT-2018-11231

Name of the Vulnerable Software and Affected Versions perfSONAR Monitoring and Debugging Dashboard MaDDash version 2.0.2 Description An issue was discovered where a direct request to the "/lib/" endpoint provides a directory listing, potentially exposing sensitive information. Recommendations For...

PT-2018-11229

Name of the Vulnerable Software and Affected Versions perfSONAR Monitoring and Debugging Dashboard MaDDash version 2.0.2 Description An issue was discovered where a direct request to "/style/" provides a directory listing, potentially exposing sensitive information. Recommendations For perfSONAR...

PT-2018-11230

Name of the Vulnerable Software and Affected Versions perfSONAR Monitoring and Debugging Dashboard MaDDash version 2.0.2 Description An issue was discovered where a direct request to the "/etc/" directory provides a directory listing, potentially exposing sensitive information. Recommendations Fo...