Cisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability

A vulnerability in the TCP flags inspection feature for access control lists ACLs on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected device. The vulnerability is due to incorrect...

Advantech WebAccess Express Detection (Windows SMB Login)

Detects the installed version of Advantech WebAccess Express for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

March 19, 2019—KB4489888 (OS Build 15063.1716)

None None...

Professional Services Simplified - Check out what's new!

In today's fast-moving digital world, we know businesses need to rapidly adapt to meet user expectations and stay competitive. At Akamai, we see a world of unimagined potential, enabled through the unique power of the Akamai Edge. It's this power, backed by the support of our 2000 global experts,...

Nuuo Central Management SQL Injection Exploit

The Nuuo Central Management Server allows an authenticated user to query the state of the alarms. This functionality can be abused to inject SQL into the query. As SQL Server 2005 Express is installed by default, xpcmdshell can be enabled and abused to achieve code execution. This module will...

Smoothwall Express 3.1-SP4 - Cross-Site Scripting

Smoothwall Express 3.1-SP4 - Cross-Site Scripting Exploit Title: Smoothwall Express 3.1-SP4-polar-x8664-update9 | Cross-Site Scripting Date: 06.02.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.smoothwall.org Software Link:...

Smoothwall Express 3.1-SP4 - Cross-Site Scripting Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Smoothwall Express 3.1-SP4-polar-x8664-update9 | Cross-Site Scripting Date: 06.02.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.smoothwall.org Software Link:...

Smoothwall Express 3.1-SP4 - Cross-Site Scripting

Exploit Title: Smoothwall Express 3.1-SP4-polar-x8664-update9 | Cross-Site Scripting Date: 06.02.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.smoothwall.org Software Link: https://sourceforge.net/projects/smoothwall/files/SmoothWall/3.1%20SP4/Express-3.1-SP4-x8664.iso/download...

GHSA-WJ36-V8J4-PC7C Authentication Bypass by Spoofing in express-cart

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

Improper access control

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

CVE-2018-16483

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

CVE-2018-16483

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

CVE-2018-16483

CVE-2018-16483 affects express-cart (

CVE-2018-16483

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

Security Bulletin: GNU C library (glibc) vulnerability affects the Intel MPSS for use on the Intel Xeon Phi 3120A, Intel Xeon Phi 5110P, Intel Xeon Phi 7120A and Intel Xeon Phi 7120P PCI-Express add-in cards sold by IBM/Lenovo

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects the Intel Manycore Platform Software Stack for use on the Intel Xeon Phi PCI-Express add-in cards. The Intel Manycore Platform Software Stack is available for free on Intel's website. This is not something...

Security Bulletin: Security Vulnerabilities in Network Time Protocol Daemon affect Intel Manycore Platform Software Stack for use on Intel Xeon Phi 3120A, Intel Xeon Phi 5110P, Intel Xeon Phi 7120A, and Intel Xeon Phi 7120P PCI-Express add-in cards

Summary Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform Software Stack for use on the Intel Xeon Phi PCI-Express add-in cards. Vulnerability Details Abstract Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform...

Oracle Application Express AnyChart Flash-Based XSS (CVE-2018-2699)

A vulnerability exists in Oracle Application Express. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

apex-publish-static-files npm command injection vulnerability

apex-publish-static-files npm is a package that can upload static files from a local directory to Orcale APEX. A command injection vulnerability exists in apex-publish-static-files npm versions prior to 2.0.1. The vulnerability can be exploited to execute arbitrary shell commands with specially...

CVE-2018-0667

Untrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3.08 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0667

CVE-2018-0667 involves an untrusted search path vulnerability in the installer components of INplc SDK Express 3.08 and earlier and INplc SDK Pro+ 3.08 and earlier. The root cause is a DLL preloading issue that allows an attacker to gain arbitrary code execution with the privileges of the user in...