CVE-2017-9939

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations...

Design/Logic Flaw

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network...

CVE-2017-9941

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication...

CVE-2017-9940

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network...

CVE-2017-9941

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication...

CVE-2017-9942

Siemens SiPass integrated (all versions prior to V2.70) contains a local-attack credential leak (CVE-2017-9942: passwords stored in a recoverable format). An attacker with local access to the SiPass server or a SiPass client could potentially obtain credentials from the system. Mode of impact is ...

CVE-2017-9939

Siemens SiPass integrated (all versions before V2.70) contains an authentication bypass vulnerability (CVE-2017-9939) that could be exploited by an unauthenticated attacker with network access to bypass authentication on the SiPass server and perform administrative operations. Connected advisorie...

CVE-2017-9940

Siemens SiPass integrated (all versions prior to 2.70) contains CVE-2017-9940, an improper privilege management flaw that could allow an attacker with a low-privileged network user account to read or write files on the SiPass server over the network. Root cause: improper privilege handling enabli...

Expression Injection Vulnerability in Kingdee GSiS Government Service Platform

GSiS government service platform is an integrated product developed by Kingdee to integrate government affairs disclosure, government services and e-surveillance on a unified e-government platform. Expression injection vulnerability exists in Kingdee GSiS government service platform. It allows...

CVE-2017-2343

CVE-2017-2343 affects Juniper Junos SRX Series with the Integrated User Firewall (UserFW) authentication API. The root cause is hardcoded credentials in UserFW, enabling an unauthenticated, remote attacker to potentially gain administrative access to the SRX device and compromise connected servic...

CVE-2017-2343 SRX Series: Hardcoded credentials in Integrated UserFW feature.

The Integrated User Firewall UserFW feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of the UserFW services authentication API,...

The vulnerabilities of the software platforms Flash Player for Linux, Flash Player, Adobe Integrated Runtime, and Adobe Flash Player Extended Support Release allow attackers to gain access to protected information.

The vulnerability of the Flash Player software platforms such as Flash Player for Linux, Adobe Integrated Runtime, and Adobe Flash Player Extended Support Release is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

Siemens SiPass Integrated Authentication Bypass Vulnerability

SiPass server is a component of the SiPass centralized access control system that receives connections from clients for communication. An authentication bypass vulnerability exists in Siemens SiPass integrated, where an attacker with network access to the SiPass integrated server could bypass the...

Siemens SiPass Integrated Unauthorized Operation Vulnerability

SiPass server is a component of the SiPass centralized access control system that receives connections from clients for communication. An unauthorized operation vulnerability exists in Siemens SiPass integrated, where an attacker in an intermediate location between the SiPass integrated server an...

Siemens SiPass Integrated Credential Acquisition Vulnerability

SiPass server is a component of the SiPass centralized access control system that receives connections from clients for communication. A credential acquisition vulnerability exists in Siemens SiPass integrated, where an attacker with local access to the SiPass integrated server or SiPass integrat...

Siemens SiPass Integrated File Read/Write Vulnerability

SiPass server is a component of the SiPass centralized access control system that receives connections from clients for communication. A file read/write vulnerability exists in Siemens SiPass integrated, where an attacker with access to a low-privileged user account could read or write files on t...

Siemens SiPass integrated

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SiPass integrated Vulnerabilities: Improper Authentication, Improper Privilege Management, Channel Accessible by Non-Endpoint, Storing Passwords in a Recoverable Format AFFECTED PRODUCTS Siemens...

GShark Framework - Check all your backdoors with only one telegram account

This framework can perform web post exploitation, with this you can interact with multiple web backdoor and execute custom module, script. Check all your backdoors with only one telegram messenger account! Connect web backdoor to master server and control it with Telegram Download visual backdoor...

Faraday v2.5 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time, letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...

Dell Integrated Remote Access Controller Cross-Site Scripting Vulnerability

The Dell Integrated Remote Access Controller iDRAC 7 and 8 are both remote access control cards from Dell USA. A cross-site scripting vulnerability exists in Dell iDRAC 7 and 8 versions prior to 2.21.21.21. A remote attacker could exploit this vulnerability to inject arbitrary web script or HTML...