EUVD-2010-0601

Malware in sbrugna...

EUVD-2010-0602

Malware in sbrugna...

EUVD-2010-0603

Malware in sbrugna...

EUVD-2012-0365

Malware in sbrugna...

EUVD-2013-3381

Malware in sbrugna...

CVE-2013-3446

Open redirect vulnerability in the login page in Cisco Digital Media Manager DMM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849...

Cisco Digital Media Manager < 5.3 Privilege Escalation

The remote device is running a version of Cisco Digital Media Manager prior to 5.3. As such, it is affected by a privilege escalation vulnerability. A remote, authenticated attacker could leverage this to execute arbitrary code on the device. TRUSTED...

Cisco Digital Media System DMM Open Redirect Vulnerability

Cisco Digital Media Manager DMM contains a vulnerability that could allow an unauthenticated, remote attacker to cause the DMM to issue a redirect to an arbitrary third-party URL. The vulnerability is due to an open redirect issue in the DMM login page. An attacker could exploit this vulnerabilit...

CVE-2013-3446

Open redirect vulnerability in the login page in Cisco Digital Media Manager DMM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849...

Open redirect

Open redirect vulnerability in the login page in Cisco Digital Media Manager DMM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849...

CVE-2013-3446

Open redirect vulnerability in the login page in Cisco Digital Media Manager DMM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849...

Cisco Digital Media Manager privilege escalation

It's possible to access administration pages by URLs...

Cisco Security Advisory: Cisco Digital Media Manager Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Digital Media Manager Privilege Escalation Vulnerability Advisory ID: cisco-sa-20120118-dmm Revision 1.0 For Public Release 2012 January 18 16:00 UTC GMT +--------------------------------------------------------------------- Summary =======...

CVE-2012-0329

Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878...

Code injection

Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878...

CVE-2012-0329

Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878...

CVE-2012-0329

CVE-2012-0329 affects Cisco Digital Media Manager (DMM) versions prior to or including 5.2.3. The vulnerability arises from improper validation of unreferenced URLs, allowing a remote, authenticated attacker to access administrative resources and execute arbitrary code. Impact is privilege escala...

Cisco Digital Media Manager Privilege Escalation Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Default credentials

Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...

CVE-2010-0571

Unspecified vulnerability in Cisco Digital Media Manager DMM 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008...