7951 matches found
Recent Python Meterpreter Improvements
The Python Meterpreter has received quite a few improvements this year. In order to generate consistent results, we now use the same technique to determine the Windows version in both the Windows and Python instances of Meterpreter. Additionally, the native system language is now populated in the...
How to Attach Additional Disk to NetScaler MAS 12.0
Citrix ADM, formerly NetScaler MAS The article describes how to attach an additional disk to NetScaler MAS 12.0 and lower versions. Points to Note You can only add one additional disk to NetScaler MAS apart from the default 120 GB disk. Adding more than one additional disk is not supported. The...
CVE-2017-5655
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host...
Allen Disk Cross-Site Scripting Vulnerability
Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site scripting vulnerability exists in the 'id' parameter of the downfile.php file in Allen Disk version 1.6. A remote attacker can exploit this...
Allen Disk Cross-Site Request Forgery Vulnerability
Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site request forgery vulnerability exists in the setpass.php file in Allen Disk version 1.6. A remote attacker can exploit this vulnerability to...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
Design/Logic Flaw
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
CVE-2017-8848
Summary (CVE-2017-8848): Allen Disk 1.6 contains a cross-site request forgery (CSRF) in setpass.php that can change a password. Multiple sources (CNVD-2017-07083, NVD entry, Red Hat listing) confirm the vulnerability in Allen Disk 1.6 and its CSRF nature, but the connected documents do not provid...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
CVE-2017-8832
Allen Disk 1.6 has XSS in the id parameter to downfile.php...
CVE-2017-8832
Allen Disk 1.6 has XSS in the id parameter to downfile.php...
CVE-2017-8832
Allen Disk 1.6 has XSS in the id parameter to downfile.php...
CVE-2017-8832
Allen Disk 1.6 has a Cross-Site Scripting (XSS) vulnerability in the id parameter of downfile.php. The connected records consistently describe this XSS flaw for Allen Disk 1.6, but none of the provided documents supply details on exploitation methods, affected versions beyond 1.6, specific root c...
Cloud Foundry cf-release exceeds quota vulnerability
Cloud Foundry is an open source multi-cloud application platform as a service PaaS managed by the Cloud Foundry Foundation. An out-of-quota vulnerability exists in Cloud Foundry cf-release, where the "Cloud Controller" in Cloud Foundry cf-release enables a certified developer user to exceed a...
Apple macOS Sierra System Integrity Protection Input Validation Vulnerability
Apple macOS Sierra is an operating system developed by Apple for Mac computers.System Integrity Protection is one of the components of System Integrity Protection. An input validation vulnerability exists in the System Integrity Protection component in Apple macOS Sierra versions prior to 10.12.4...
Solarwinds LEM 6.3.1 Management Shell Arbitrary File Read Vulnerability
The management shell on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 allows the end user to edit the MOTD banner displayed during SSH logon. The editor provided for this is nano. This editor has a keyboard mapped function which lets the user import a file from the local file...
Disk Sorter Enterprise 9.5.12 GET Buffer Overflow
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Disk Sorter Enterprise GET Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerabilit...