4604 matches found
PT-2016-1717
Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-04-01 Description The issue is related to the Autodiscover implementation in Exchange ActiveSync, where the...
Asbru Web Content Management System Detection
Detection of Asbru Web Content Management System. This script sends an HTTPS GET request and checks for the presence of the application. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
WordPress OptinMonster Plugin <= 1.1.4.5 - Execution of Arbitrary Shortcodes
Because of this vulnerability, unauthenticated users can execute arbitrary WordPress shortcodes via a simple HTTP GET request. Solution Update the plugin...
Kaltura Video Platform Detection (HTTP)
HTTP based detection of the Kaltura Video Platform. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Veris: Critical IDOR - Get Rules of any organization remotely
Hello Team, I have found a critical IDOR using which an attacker can get rules of any organization remotely by just changing the venue id in GET Request. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...
Xceedium Xsuite Remote Version Detection
Detection of installed version of Xceedium Xsuite. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Cisco Unified Communications Manager Information Disclosure
The vulnerability of the Cisco Unified Communications Manager IP-telephony management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to information about table names and database...
Cisco TelePresence Video Communication Server Information Disclosure
The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain statistical data about calls through a specially crafte...
File Replication Pro Remote Version Detection
Detects the installed version of File Replication Pro. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
New Relic: CSRF - Regenerate all admin api keys
Hi The request to regenerate all admin api keys is a GET request without CSRF protection. As such, you can regenerate someone's keys using csrf. While not too big of an issue the admin can always see the keys and use them its certainly annoying and can cause business disruption. Additionally, a...
OpenCms 9.5.2 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-063 Product: OpenCms Official Maintainer: Alkacon Software GmbH Affected Versions: 9.5.2 Tested Versions: 9.5.2 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Maintainer Notification:...
Thru Managed File Transfer Portal 9.0.2 - SQL Injection
Thru Managed File Transfer Portal 9.0.2 - SQL Injection -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-056 Product: Thru Managed File Transfer Portal Manufacturer: Thru Affected Versions: 9.0.2 Tested Versions: 9.0.2 Vulnerability Type: SQL Injection CWE-89 Risk Level: Hig...
Thru Managed File Transfer Portal 9.0.2 - SQL Injection
Exploit for asp platform in category web applications Product: Thru Managed File Transfer Portal Manufacturer: Thru Affected Versions: 9.0.2 Tested Versions: 9.0.2 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Open Manufacturer Notification: 2015-10-28 Solution Date:...
Thru Managed File Transfer Portal 9.0.2 - SQL Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-056 Product: Thru Managed File Transfer Portal Manufacturer: Thru Affected Versions: 9.0.2 Tested Versions: 9.0.2 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Open Manufacturer Notification:...
PT-2016-1194
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions X8.1 through X8.7 Description The issue is related to the lack of protection for service data, allowing remote attackers to obtain sensitive call-statistics information via a direct...
PT-2016-1193
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.50.98000.480 Description The issue is related to a lack of protection for internal data in the system. It allows a remote attacker to obtain sensitive information about database table names and...
Alsovalue CMS 2016Q1 - SQL Injection Web Vulnerability
Document Title: =============== Alsovalue CMS 2016Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1714 Release Date: ============= 2016-02-08 Vulnerability Laboratory ID VL-ID: ==================================== 171...
Log2Space Central 6.2 Cross Site Scripting
FULL DISCLOSURE Product : Log2Space Central Exploit Author : Rahul Pratap Singh Version : 6.2 Home page Link : http://www.spacecom.co.in/log2spacecentralserveroverview.html Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 27/Jan/2016 XSS...
los818 CMS 2016 Q1 - SQL Injection Web Vulnerability
Document Title: =============== los818 CMS 2016 Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1680 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 1680...
