Cross site scripting

lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS...

CVE-2018-7652

lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS...

CVE-2018-7652

CVE-2018-7652 affects Zonemaster Web GUI, specifically lib/Zonemaster/GUI/Dancer/Export.pm, with a cross-site scripting (XSS) vulnerability present in versions before 1.0.11. The issue is triggered by unsanitized data in the Export.pm component, enabling injection of arbitrary script or HTML. Pub...

CVE-2018-7652

lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS...

CVE-2018-7652: Improper Neutralization of Input During Web Page Generation

lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS...

PT-2018-18186

Name of the Vulnerable Software and Affected Versions Zonemaster Web GUI versions prior to 1.0.11 Description The issue is related to an XSS problem in the lib/Zonemaster/GUI/Dancer/Export.pm file. Recommendations For versions prior to 1.0.11, update to version 1.0.11 or later to resolve the issu...

Threat Analysis: ROKRAT Malware

ROKRAT also referred to as DOGcall is a family of malware that has been used by attackers originating from North Korea. The family continues to evolve and adopt techniques from other families also used by the same attack group. The ROKRAT core payload is typically deployed by a loader, which has...

CVE-2013-0267

CVE-2013-0267 affects Apache VCL: the Privileges portion of the web GUI and the XMLRPC API on VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2, and 2.1 allow remote authenticated users with nodeAdmin, manageGroup, resourceGrant, or userGrant permissions to gain privileges, cause a denial of service, or...

CVE-2013-0267

The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2 and 2.1 allow remote authenticated users with nodeAdmin, manageGroup, resourceGrant, or userGrant permissions to gain privileges, cause a denial of service, or conduct cross-site scriptin...

PT-2018-4065

Name of the Vulnerable Software and Affected Versions Apache VCL versions 2.1, 2.2.x through 2.2.1, 2.3.x through 2.3.1 Description The issue allows remote authenticated users with certain permissions to gain privileges, cause a denial of service, or conduct cross-site scripting XSS attacks. This...

PcapXray - A Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram

PcapXray is a Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction. PcapXray Design Specification Goal: Given a Pcap File, plot a network diagram displaying hosts in the network,...

IBM San Volume Controller / Storwize / FlashSystem 8.1.x < 8.1.0.1 privilege escalation vulnerability

According to its self-reported version number, the IBM San Volume Controller, Storwize or FlashSystem is vulnerable to an unspecified privilege escalation vulnerability within the Service Assistant GUI. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106844;...

Command injection

Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems...

CVE-2017-6230

Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems...

CVE-2017-6230

The CVE-2017-6230 entry concerns Ruckus Networks Solo APs (firmware R110.x or earlier) and SZ managed APs (firmware R5.x or earlier). It describes an authenticated Root Command Injection vulnerability in the web-GUI, enabling an authenticated user to execute privileged commands on affected system...

EvilOSX

EvilOSX An evil RAT Remote Administration Tool for macOS...

PT-2018-8325

Name of the Vulnerable Software and Affected Versions Ruckus Networks Solo APs versions R110.x or before Ruckus Networks SZ managed APs versions R5.x or before Description The issue concerns an authenticated Root Command Injection in the web-GUI. This could allow authenticated valid users to...

CVE-2017-6230: Improper Neutralization of Special Elements used in an OS Command

Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems...

Pymap-Scanner - Python Scanner with GUI

Python-based port scanner with Pyqt4 user interface. Features Basic Gui Speed Scan Custom Services User Control Error Control Useful parameters And More. Installation Modules $ Pyqt4 $ Nmap RequirementsThird +xsltproc Download Pymap-Scanner...

Pulse Secure Desktop Linux clients GUI component man-in-the-middle bypass security vulnerability

Pulse Secure Desktop Linux clients formerly known as Juniper Junos Pulse is Juniper Networks' suite of Linux-based client software for accessing endpoint devices on the Juniper Pulse Secure Gateway.The GUI component also known as PulseUI is one of the graphical user interfaces. The GUI component...