CVE-2016-1288

The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service service outage by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840...

daylewis.net XSS vulnerability

Vulnerable URL: http://www.daylewis.net/intranet/logon.php?e=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Hacker Leaks Info of 30,000 FBI and DHS Employees

An unknown hacker who promised to release the personal information on government employees has dump online a list of nearly 20,000 Federal Bureau of Investigation FBI agents and 9,000 Department of Homeland Security DHS officers. Though the authenticity of the information has not been verified, a...

intranet.concawe-fuelseurope.eu XSS vulnerability

Vulnerable URL: https://intranet.concawe-fuelseurope.eu/Common/ForgotPassword.asp?Action=Send==%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

intranet.sensefly.com XSS vulnerability

Vulnerable URL: https://intranet.sensefly.com/intranet/change-ldap-password.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websi...

intranet.sensefly.com XSS vulnerability

Vulnerable URL: https://intranet.sensefly.com/intranet/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No...

intranet.eee.hku.hk XSS vulnerability

Vulnerable URL: http://intranet.eee.hku.hk/portal/ttable.asp?semester=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Open Atrium - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-174

Open Atrium distribution enables you to create an intranet. Open Atrium Core module doesn't sufficiently sanitize some user supplied text, leading to a reflected Cross Site Scripting vulnerability XSS. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordanc...

intranet.waying.edu.hk XSS vulnerability

Vulnerable URL: http://intranet.waying.edu.hk/dt/2001/gallery/enlarge.asp?pic=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Server side request forgery (ssrf)

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

premiointegrabbva.es XSS vulnerability

Vulnerable URL: http://www.premiointegrabbva.es/intranet/login.php Details: Description| Value ---|--- Patched:| Yes, at 04.05.2016 Latest check for patch:| 04.05.2016 15:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank...

intranet-software.hulkvideo.ml XSS vulnerability

Vulnerable URL: http://intranet-software.hulkvideo.ml/search.php?id="...

用友某系统直接登录Getshell(修复不当哦)

简要描述： ... 详细说明： 用友某系统Websphere https://211.144.131.98:9043/ibm/console/ 输入admin进入后台 http://211.144.131.98:9080/safetest/index.jsp 马 然后就是： WooYun: 用友某系统Websphere直接登录Getshell 内网什么的. 运维不够负责啊 漏洞证明： ···...

intranet.codigo-id.com XSS vulnerability

Vulnerable URL: http://intranet.codigo-id.com/password.php?email=%27%22%3E%3E%3C/title%3E%27%22%3ESCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:47 GMT Vulnerability type:|...

Endress+Hauser FieldCare CodeWrights HART Comm DTM Component Arbitrary File Read Vulnerability

Endress+Hauser FieldCare is a suite of applications for managing the FDT/DTM framework.CodeWrights HART Comm DTM is a component for providing communication protocol information to the FDT/DTM framework application. A security vulnerability in the CodeWrights HART Comm DTM group used by...

CVE-2015-6463

CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via a longtag XML schema containing an external entity declaration in...

CVE-2015-6463

CVE-2015-6463 concerns CodeWrights HART Comm DTM components used with Endress+Hauser FieldCare. The vulnerability arises from processing a longtag XML schema containing an external entity declaration and an entity reference (XXE), enabling a remote attacker to read arbitrary files, issue HTTP req...

Good Technology Authentication Insecure Coupling

---------------------------------------------------------------- v1 - modzero Security Advisory: Insecure application-coupling in Good Authentication Delegation MZ-15-03 ---------------------------------------------------------------------...

Default credentials

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

CVE-2015-2915

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...