[SECURITY] Fedora 31 Update: cacti-spine-1.2.10-1.fc31

Spine is a supplemental poller for Cacti that makes use of pthreads to achi eve excellent performance...

[SECURITY] Fedora 30 Update: cacti-spine-1.2.10-1.fc30

Spine is a supplemental poller for Cacti that makes use of pthreads to achi eve excellent performance...

[SECURITY] Fedora 30 Update: cacti-spine-1.2.9-1.fc30

Spine is a supplemental poller for Cacti that makes use of pthreads to achi eve excellent performance...

CVE-2019-11232

EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information Password without being authenticated, by sending an EMPNO element to the kwslogin/asp/queryuser.asp URI, and then reading the PWD element...

Design/Logic Flaw

EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGINID element to the auth/main/asp/checkuserlogininfo.aspx URI, and then reading the response, as demonstrated by the KWEMAIL or KWTEL field...

Information disclosure

EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information Password without being authenticated, by sending an EMPNO element to the kwslogin/asp/queryuser.asp URI, and then reading the PWD element...

CVE-2019-11233

CVE-2019-11233 affects EXCELLENT INFOTEK BiYan v1.57–v2.8. A misdesign allows an unauthenticated attacker to leak user information by sending a LOGIN_ID element to the endpoint auth/main/asp/check_user_login_info.aspx and reading the response, with leakage demonstrated via KW_EMAIL or KW_TEL fiel...

CVE-2019-11232

Summary of CVE-2019-11232 : Affected product is EXCELLENT INFOTEK BiYan versions 1.57 through 2.8. A vulnerability allows an unauthenticated attacker to disclose a password by sending an EMP_NO element to the kws_login/asp/query_user.asp URI and reading the PWD element. This results in informatio...

AlienVault OSSIM av-centerd Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'AlienVault OSSIM av-centerd Command Injection', 'Description' = %q This module exploits a code execution fla...