5382 matches found
Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal
Exploit for windows platform in category web applications Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License...
Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal
Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The...
JVN#96052093: ETX-R vulnerable to denial-of-service (DoS)
ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service DoS vulnerability. Impact A remote unauthenticated attacker may cause the web server on the product to be terminated abnormally. Solution Apply a Workaround The following workarounds may mitigate the...
JVN#61317238: ETX-R vulnerable to cross-site request forgery
ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Apply a Workaround The following workarounds may mitigate the...
Threat Outbreak Alert RuleID23343: Email Messages Distributing Malicious Software on June 8, 2016
Medium Alert ID: 46609 First Published: 2016 June 8 12:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23343 may contain the following files: Name | Size...
Ubiquiti Inc.: Stored XSS in unifi.ubnt.com
Dear @ubnt-matt, I've found a stored xss in unifi.ubnt.com Step to reproduce : Step 1: Login to unifi.ubnt.com Step 2: Connect latest unifi controller with unifi.ubnt.com via cloud access. Step 3: Create site with any name in that controller. Step 4: Click on launch site in unifi.ubnt.com then yo...
Ubiquiti Inc.: Open Redirect in unifi.ubnt.com [Controller Finder]
Description : An open redirect is an application that takes a parameter and redirects a user to the parameter value without any validation. This vulnerability is used in phishing attacks to get users to visit malicious sites without realizing it...
JVN#81698369: Multiple Buffalo wireless LAN routers vulnerable to directory traversal
Multiple wireless LAN routers provided by BUFFALO INC. contain a directory traversal vulnerability CWE-22. Impact Arbitrary files on the server may be viewed by an attacker who can access the product. Solution Update the Firmware Apply the appropriate firmware update provided by the developer...
Ubiquiti Inc.: UniFi Video v3.2.2 (Windows) Local Privileges Escalation due to weak default install directory ACLs
The UniFi Video Windows installation v3.7.3 and prior create directories with insecure permission, allowing unprivileged users to modify UniFi Video files and consequently escalate privileges. This vulnerability does affect all UniFi video versions up to and including 3.7.3 and is referenced by...
Ubiquiti Inc.: Read-Only user can execute arbitraty shell commands on AirOS
This vulnerability is very similar to 128750, but it avoid the solution applied to the last beta XM firmware. In this report is used the last beta XM firmware: XM.v6.0-beta9 Vulnerability The vulnerability resides in the function fetchCookies file remote.inc:117. Just like last time is a non...
JVN#73166466: a-blog cms vulnerable to cross-site scripting
a-blog cms provided by appleple Inc. is a content management system CMS. a-blog cms contains a cross-site scripting vulnerability in the standard template of the comment functionality. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the Patch Apply the patch...
Threat Outbreak Alert RuleID22731: Email Messages Distributing Malicious Software on May 12, 2016
Medium Alert ID: 46147 First Published: 2016 May 12 19:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22731 may contain the following files: Name | Size...
JVN#22978346: WN-G300R Series vulnerable to cross-site scripting
WN-G300R Series provided by I-O DATA DEVICE, INC. is a wireless LAN router. WN-G300R Series contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Firmware Apply the appropriate firmware update provide...
Ubiquiti Inc.: Source code disclosure on https://107.23.69.180
The researcher discovered a misconfigured GitHub repo leaking some sensitive data...
Dell EMC OpenManage Server Administrator (OMSA) Detection (HTTP)
HTTP based detection of Dell EMC OpenManage Server Administrator OMSA. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
biweb SQL Injection Vulnerability
BIWEB Business Intelligence Website System is a website system relying on ArthurXF enterprise application-level PHP development framework, developed and designed by the Shanghai NetWorks Network Information Co., Ltd. is a rapid development, simple and easy to use object-oriented enterprise...
Solaris 10 (sparc) : 152097-71 (deprecated)
JavaSE 7: update 171 patch equivalent to JDK 7u171, 64bit. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152097 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...
Tollgrade Smart Grid EMS LightHouse Vulnerabilities
OVERVIEW Ashish Kamble of Qualys, Inc. has identified vulnerabilities in Tollgrade Communications, Inc.’s Smart Grid LightHouse Sensor Management System SMS Software EMS. Tollgrade has produced a new version to mitigate these vulnerabilities. Ashish Kamble has tested the new version to validate...
Ubiquiti Inc.: Reflected XSS in scores.ubnt.com
Parameter p in https://scores.ubnt.com/form.html?uid=1&p=airFiber is vulnerable to XSS. If a user logs in at https://account.ubnt.com/login and visits https://scores.ubnt.com/form.html?uid=1&p=airFiber"alertdocument.cookie;, a message box will be presented with his cookie. Attached is a POC...