CVE-2020-13378

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...

CVE-2020-13378: Improper Neutralization of Special Elements used in an OS Command

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...

PT-2023-11473 · Loadbalancer.Org · Loadbalancer.Org Enterprise Va Max

Name of the Vulnerable Software and Affected Versions: Loadbalancer.org Enterprise VA MAX versions 8.3.8 and earlier Description: The issue allows a remote authenticated attacker to execute arbitrary code due to an OS Command Injection vulnerability. Recommendations: For versions 8.3.8 and earlie...

CVE-2020-13378

CVE-2020-13378 affects Loadbalancer.org Enterprise VA MAX up to version 8.3.8. The issue is an OS command injection in the appliance that could allow a remote authenticated attacker to execute arbitrary code. CVSS v3.1 base score 8.8 (HIGH) with network access, low attack complexity, and privileg...

CVE-2020-13377: Improper Limitation of a Pathname to a Restricted Directory

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files...

CVE-2018-18864

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed...

CVE-2018-18864

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed...

Design/Logic Flaw

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed...

CVE-2018-18864

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed...

PT-2018-14699

Name of the Vulnerable Software and Affected Versions Loadbalancer.org Enterprise VA MAX versions prior to 8.3.3 Description The issue arises because Apache HTTP Server logs are displayed, leading to a potential XSS problem. Recommendations For versions prior to 8.3.3, update to version 8.3.3 or...

CVE-2018-18864: Improper Neutralization of Input During Web Page Generation

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed...

Loadbalancer.org Enterprise VA MAX Cross Site Scripting

Title: Loadbalancer.org Enterprise VA MAX - Unauthenticated Stored XSS Author: Jakub Palaczynski Date: 24. July 2018 CVE: CVE-2018-18864 Affected product: ============= Loadbalancer.org Enterprise VA MAX before 8.3.3 Impact: ====== Remote Code Execution with root privileges. Vulnerability -...

Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key

No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.or...

Loadbalancer Enterprise VA静态SSH密钥安全绕过漏洞

Bugtraq ID:66268 Loadbalancer Enterprise VA是一个负载均衡应用设备。 Loadbalancer Enterprise VA设备存在静态公钥和私钥，当密钥重生成后，没有把公钥从authorizedkeys2文件中删除，允许任意用户使用默认私钥访问。 0 Loadbalancer Enterprise VA 7.5.2 Loadbalancer Enterprise VA 7.5.3已经修复该漏洞，建议用户下载更新： http://www.loadbalancer.org/...

Loadbalancer.org Enterprise VA SSH Private Key Exposure

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'net/ssh' class Metasploit3 'Loadbalancer.org Enterprise VA SSH Private Key Exposure', 'Description' = %q Loadbalancer.org ships a public/privat...

Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key Vulnerability

The Loadbalancer.org Virtual Appliance is a revolution in software load balancing. The software is simple to install on Windows, Mac & Linux and does not have any adverse effects on the host operating system. Details: ---------- 0x01 - SSH Private Key Loadbalancer.org Enterprise VA 7.5.2 contains...

Loadbalancer.org Enterprise VA 7.5.2 Static SSH Key

Loadbalancer.org Enterprise VA 7.5.2 contains a default SSH private key. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Loadbalancer.org Enterprise VA 7.5.2 Static SSH Key

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.org http://www.loadbalancer.org/...

NMRC Advisory - Multiple Valicert Problems

Information Anarchy 2K01 Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Cyberiad [email protected] Phuzzy L0gic [email protected] 04Dec2001 Platforms : Windows NT 4.0 with SP6a : Windows 2000 Server : Solaris 2.6-2.8 : AIX 4.3.3 : HP-UX 11.0 Application : ValiCert Enterprise VA v3.3 - 4.2....