Design/Logic Flaw

Cisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords by examining the HTML source code of the Quick Discovery options page, aka Bug ID CSCum00019...

CVE-2014-8007

Cisco Prime Infrastructure is affected by a vulnerability where the Quick Discovery options page HTML source contains stored device-discovery passwords. Exploitation requires authenticated access, enabling an attacker to view passwords through normal page inspection. The issue is described in Cis...

CVE-2014-8007

Cisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords by examining the HTML source code of the Quick Discovery options page, aka Bug ID CSCum00019...

Digi ADDP Information Discovery

Discover host information through the Digi International ADDP service This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Digi ADDP Information Discovery', 'Description' = 'Discover host informatio...

broadcast-bjnp-discover NSE Script

Attempts to discover Canon devices Printers/Scanners supporting the BJNP protocol by sending BJNP Discover requests to the network broadcast address for both ports associated with the protocol. The script then attempts to retrieve the model, version and some additional information for all...

FreeNAC v3. 0 2 SQL injection and XSS flaws and fixes-vulnerability warning-the black bar safety net

FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties Author: Blake Software address: http://sourceforge.net/project/showfiles.php?groupid=170004 Affected version: 3.02 Test system: Ubuntu 8.04 freenac version 3.02 vmware appliance FreeNAC FreeNAC provides Virtual LAN assignment, LAN access...

PT-2011-2777 · Cisco · Cisco Unified Operations Manager

Name of the Vulnerable Software and Affected Versions: Cisco Unified Operations Manager versions prior to 8.6 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. This can be achieved via several...

Universal Plug and Play (UPnP) Protocol Detection

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' UPnP. This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network...