658 matches found
BEIMS ContractorWeb 5.18.0.0 - SQL Injection
Exploit Title: SQL Injection Date: 18 December, 2017 Exploit Author: Rajwinder Singh Vendor Homepage: http://www.beims.com/products/ Software Link: http://www.beims.com/optional-modules/ccw Version: BEIMS ContractorWeb .NET System 5.18.0.0 CVE : 2017-17721 Vulnerability Details:...
CVE-2017-0889: Server-Side Request Forgery (SSRF)
Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery SSRF vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources...
Design/Logic Flaw
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...
CVE-2017-9506: Server-Side Request Forgery (SSRF)
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...
Cisco DPC3939 Firmware Information Disclosure Vulnerability
Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. Allows an attacker to communicate with the internal network interface of the Network Processor Atom Linux instance...
Nextcloud: SSRF at apps.nextcloud.com/developer/apps/releases/new
Hi, I've found SSRF vulnerability at https://apps.nextcloud.com/developer/apps/releases/new Description Server Side Request Forgery SSRF is a vulnerability that appears when an attacker has the ability to create requests from the vulnerable server. Usually, Server Side Request Forgery SSRF attack...
Cisco IOS Software RTCP Input Queue Vulnerability
A vulnerability in handling Real-Time Control Protocol RTCP traffic in Cisco Unified Border Element CUBE could allow an unauthenticated, remote attacker to cause traffic that is destined to an affected device and traffic that needs to be processed switched to fail. The vulnerability is due to...
PT-2013-62: Internal Network Resources Access in Web Viewer for Samsung DVR
The specialists of the Positive Research center have detected "Internal Network Resources Access" vulnerability in Web Viewer for Samsung DVR. The vulnerability allows attackers to get unauthorized access to view and control the cameras via unsafe cookies parsing. If an attacker sends the request...
Cisco Unified Computing System Remote Denial of Service Vulnerability
Cisco Unified Computing System contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to the improper handling of user-supplied SSH requests by affected software. An unauthenticated,...
New Apache Reverse Proxy Flaw Allows Access to Internal Network
New Apache Reverse Proxy Flaw Allows Access to Internal Network Apache acknowledged another reverse proxy issue CVE-2011-4317 which was discovered by Apache developer from Red Hat while creating a QualysGuard vulnerability signature for an older problem CVE-2011-3368. Depending on the reverse pro...
Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000
SEC Consult Security Advisory 20090429-0 ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600...
LevelOne AMG-2000 Wireless AP Proxy Bypass
SEC Consult Security Advisory ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600 impact:...
SRT2003-06-12-0853 - ike-scan local root format string issue
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
IBM Infoprint Remote Management Simple DoS
Overview ======== IBM makes a series of TCP/IP enabled printers that come with remote management features: http://www.printers.ibm.com/R5PSC.NSF/Web/wglaserselect One of these features is a Telnet-based remote management service, which has a DoS vulnerability. The vulnerability discussed here was...
FTP bounce attack through Raptor Firewall
It;s possible to make FTP server behind firewall to connect to any IP and TCP port in internal network, since PORT command with internal adress doesn't processed correctly...
Проблема CONNECT в Checkpoint Firewall-1 (protection bypass)
Пользователь из внутренней сети может подключиться к любому IP по любому протоколу используя команду CONNECT В HTTP-соединении при условии, что разрешено HTTP-тунелирование...