1366 matches found
python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter...
Windows Server 2008 End of Support: Are you Prepared?
On July 14th, 2015, Microsoft’s widely deployed Windows Server 2003 reached end of life after nearly 12 years of support. For millions of enterprise servers, this meant the end of security updates, leaving the door open to serious security risks. Now, we are fast approaching the end of life of...
Hawtio 2.5.0 Server Side Request Forgery Vulnerability
Exploit for java platform in category web applications Hawtio Server-Side Request Forgery Introduction ============ Hawtio https://hawt.io/ is a modular web console for managing Java. CipherTechs discovered that Hawtio up to and including version 2.5.0 is vulnerable to unauthenticated Server-Side...
The vulnerability of the Cisco Digital Network Architecture Center’s network management system, related to deficiencies in access control to ports, allows a intruder to gain access to internal services.
The vulnerability of the Cisco Digital Network Architecture DNA Center network management system is related to deficiencies in access control for ports. Exploiting this vulnerability could allow a malicious actor to gain access to internal services...
CVE-2019-1848
A vulnerability in Cisco Digital Network Architecture DNA Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary for system operation. An attacker could...
CVE-2019-1848
A vulnerability in Cisco Digital Network Architecture DNA Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary for system operation. An attacker could...
Authentication flaw
A vulnerability in Cisco Digital Network Architecture DNA Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary for system operation. An attacker could...
CVE-2019-1848
Cisco DNA Center (affected software) contains an authentication-bypass flaw due to insufficient access restriction on ports required for system operation. An unauthenticated, adjacent attacker could connect an unauthorized device to the cluster services subnet to reach internal services not harde...
Cisco Digital Network Architecture (DNA) Center Authentication Bypass Vulnerability
Cisco DNA Center is a complete software-based network automation and assurance solution. An authentication bypass vulnerability exists in Cisco Digital Network Architecture DNA Center versions prior to 1.3. The vulnerability stems from insufficiently restricted access to ports required for system...
Cisco DNA Center Authentication Bypass Vulnerability
A vulnerability in Cisco Digital Network Architecture DNA Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary for system operation. An attacker could...
The vulnerability of the command-line interface of the Cisco NX-OSS network operating system in Cisco devices allows a attacker to gain access to internal services.
The vulnerability of the command-line interface of the Cisco NX-OSS network operating system devices relates to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow attackers to gain access to internal services...
Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...
CVE-2019-1726
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...
CVE-2019-1726
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...
Input validation
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...
CVE-2019-1726 Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...
CVE-2019-1726 Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...
GitLab: Bypass Email Verification -- Able to Access Internal Gitlab Services that use Login with Gitlab and Perform Check on email domain
Summary Hi, I found the new SCIM provisioning function allows any group owner in gitlab to create any user with verified email address. i.e. I can create user with email address [email protected], and gitlab.com will think [email protected] is verified already. This will bring problem to the clie...
The vulnerability of the Software Image Management component of the system identification management service in Cisco Digital Network Architecture Center allows a attacker to gain access to internal services.
The vulnerability of the Software Image Management component of the Cisco Digital Network Architecture Center DNA Center’s identity management service is related to insufficient verification of data entered by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, t...
CVE-2019-1841
A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...