Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability (CNVD-2018-20666)

Cisco Hosted Collaboration Mediation Fulfillment HCM-F is a set of software for centralized management of Cisco HCS solutions from Cisco USA. The software provides configuration, management and monitoring of Cisco HCM-F services and other functions. A cross-site request forgery vulnerability exis...

CVE-2018-15401

A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...

CVE-2018-15401

The CVE-2018-15401 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) with a vulnerability in its web-based management interface due to insufficient CSRF protections. A remote, unauthenticated attacker could coerce a logged-in user to perform arbitrary actions on the affected...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...

Tor Browser 7.0.8 Information Disclosure

Hi, there is the details for CVE-2017-16541 Tor Browser information disclosure, More infos at: https://www.wearesegment.com/research/tormoil-deanonymize-tor-browser-users-with-automount/ Tor Browser version 7.0.8, and probably prior, for Mac OS X and Linux, is affected by an information disclosur...

Partner Perspectives: Revealing the Future – Carbon Black and the Predictive Security Cloud (PSC)

Editor's Note: This blog and accompanying image originally appeared on LinkedIn Pulse and are being republished with permission from the author. I was recently given the privilege of attending a conference at Langkawi Island in Malaysia: the Carbon Black conference hosted at Berjaya Resort. The...

Security Bulletin: IBM Db2 Hosted is affected by the vulnerabilities known as Spectre and Meltdown

Summary IBM Db2 Hosted is affected by the vulnerabilities known as Spectre and Meltdown, which can enable CPU data cache timing to be abused to bypass conventional memory security restrictions to gain access to privileged memory that should be inaccessible. Vulnerability Details CVEID:...

Express-cart Arbitrary File Upload Vulnerability

express-cart is a shopping cart module for use in Node.js. An arbitrary file upload vulnerability exists in express-cart versions prior to 1.1.7. An attacker can exploit this vulnerability to gain access on a hosted device...

CVE-2017-6779

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

ModbusPal 1.6b - XML External Entity Injection

ModbusPal 1.6b - XML External Entity Injection + Exploit Title: ModbusPal XXE Injection + Date: 05-08-2018 + Exploit Author: Trent Gordon + Vendor Homepage: http://modbuspal.sourceforge.net/ + Software Link: https://sourceforge.net/projects/modbuspal/files/latest/download?source=files + Version:...

Kentico CMS 11 Arbitrary Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Kentico CMS version 9 through 11 - Arbitrary Code Execution Software Link: https://www.kentico.com Exploit Author: Keerati T. CVE: CVE-2018-7046 Category: webapps 1. Description Kentico is the only fully integrated ASP.NET CMS,...

ovirt-hosted-engine-setup information disclosure vulnerability

ovirt-hosted-engine-setup is a web hosting engine installation tool. An information disclosure vulnerability exists in versions of ovirt-hosted-engine-setup prior to 2.2.7. An attacker can exploit this vulnerability to obtain the root user password in a log file...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

Information disclosure

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

CVE-2018-1000018

CVE-2018-1000018 affects ovirt-hosted-engine-setup prior to version 2.2.7, exposing the root password in the setup log file. The connected sources corroborate an information disclosure vulnerability in that component/version, with multiple feeds (NVD, CNVD, Red Hat context) noting root-password e...

gps-server.net GPS Tracking Software (self hosted) Password Reset Vulnerability

gps-server.net GPS Tracking Software self hosted is a GPS location tracking program. The program is able to manage tracking history, reports, events, notifications and more. A security vulnerability exists in version 2.x of gps-server.net GPS Tracking Software self hosted, which can be exploited ...

gps-server.net GPS Tracking Software (self hosted) Remote Code Execution Vulnerability

gps-server.net GPS Tracking Software self hosted is a GPS location tracking program. The program is able to manage tracking history, reports, events, notifications and more. A security vulnerability exists in the 'writeLog' function in the fncommon.php file in gps-server.net GPS Tracking Software...

ZKTeco ZKAccess Security System 5.3.1 Stored XSS Vulnerability

Summary ZKAccess Systems are built on flexible, open technology to provide management, real-time monitoring, and control of your access control system-all from a browser, with no additional software to install. Our secure Web-hosted infrastructure and centralized online administration reduce your...

Atlassian Hipchat for Mac Remote Code Execution Vulnerability

Atlassian Hipchat is self-hosted group chat tool. Atlassian Hipchat for Mac version 4.0 suffers from a remote code execution vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the context of the affected application...