Description of Update Rollup 2 for System Center 2012 R2 Operations Manager

Description of Update Rollup 2 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Operations Manager and the Linux and Unix Monitoring Pack. Additionally, this article contains the...

OWOX, Inc.: Access to Grafana Dashboard

Hi, I was looking at the office.owox.com on port 3000 Grafana webapp. I'm not sure if it is for demo purposes, but I can access the main dashboard and view all graphs. I am also able to sign in and create my own organizations, dashboards etc. I searched on the net for any reference to this web...

Faraday v2.2 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time, letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...

EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution

EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYPHP-DEV-SERVER-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: ===============...

Udemy: Completed Compromise & Source Code Disclosure via Exposed Jenkins Dashboard at https://jenkins101.udemy.com

Howdy, @udemy! Summary: ======= I am writing to inform you of a critical information disclosure bug via an exposed Jenkins dashboard located at https://jenkins101.udemy.com. Upon navigating to this address, I was asked to authenticate with my Github account. After authenticating, I was surprised ...

Piwik PHP Object Injection Vulnerability

Piwik formerly known as phpMyVisites is an open source website access statistics system based on PHP5 and MySQL. A security vulnerability exists in the 'saveLayout' function in the /plugins/Dashboard/Controller.php script in Piwik 2.16.0 and earlier versions. A remote attacker can exploit this...

datasploit - A tool to perform various OSINT techniques

A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data. Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlates and...

Cyberoam iview UTM v0.1.2.7 - (Ajax) XSS Web Vulnerability

Document Title: =============== Cyberoam iview UTM v0.1.2.7 - Ajax XSS Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1850 Cyberoam ID: 1059276 Security ID: NCR-2064 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID...

Bezaat Script V2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Bezaat Script V2 SQL Injection Vulnerability Exploit Author : xBADGIRL21 Dork : Powed by Greenit Egypt for Information Technology Vendor Homepage : http://greenitegypt.net/products.php?catid=1 Tested on: BACKBOX MyBlog :...

DEBIAN-CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

CVE-2016-4972

CVE-2016-4972 – OpenStack Murano YAML loader misuse leading to RCE . Affected: OpenStack Murano (pre-1.0.3, Liberty) and Murano 2.x before 2.0.1 (Mitaka); Murano-dashboard before 1.0.3 and 2.x before 2.0.1; python-muranoclient before 0.7.3 (Liberty) and 0.8.x before 0.8.5 (Mitaka). Detail: Murano...

CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

Bezaat Script 2 SQL Injection

Exploit Title : Bezaat Script V2 SQL Injection Vulnerability Exploit Author : xBADGIRL21 Dork : Powed by Greenit Egypt for Information Technology Vendor Homepage : http://greenitegypt.net/products.php?catid=1 Tested on: BACKBOX MyBlog : http://xbadgirl21.blogspot.com/ skype:xbadgirl21 Date:...

Arabseed XCMS 1.0.9 SQL Injection

Exploit Title : Arabseed XCMS V1.0.9 SQL injection Vulnerability Exploit Author : xBADGIRL21 Vendor Homepage : http://arabseed.com/ Tested on: BACKBOX MyBlog : http://xbadgirl21.blogspot.com/ skype:xbadgirl21 Date: 07/09/2016 video Proof : https://youtu.be/ABNSN3XecHw a DESCRIPTION : + Arabseed i...

Goigi CMS Backend /admin/index.php Universal Password Bypass Vulnerability

Goigi CMS has a universal password bypass vulnerability in the backend /admin/index.php login, which can be utilized with '=' 'or' to bypass login authentication. When the login succeeds, the page returns 302 and location=location: dashboard in the http header. If the login fails, the returned...

Cisco Identity Services Engine Admin Dashboard Page Cross-Site Scripting Vulnerability

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting...

Zabbix Default Guest Account (HTTP)

Zabbix has a default guest account with no password set. It was possible to access the dashboard without special authentication. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Command line Network Diagnostic Tool: myLG

Command line Network Diagnostic Tool myLG, my looking glass is software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp like Telia, Level3 More than 200 countries DNS Lookup information Local fast...

F5 WebSafe Dashboard Cross-Site Scripting Vulnerability

F5 WebSafe is a suite of web fraud protection solutions from F5 USA. The solution provides malware and fraud detection, client-side mobile threat protection, etc. F5 WebSafe Dashboard is one of the configuration management tools. A cross-site scripting vulnerability exists in F5 WebSafe Dashboard...