Tridium NiagaraAX Fox Channel Protocol Information Disclosure Vulnerability

TRIDIUM NiagaraAX is a software framework and development environment. A security vulnerability in the TRIDIUM NiagaraAX fox channel protocol allows remote attackers to exploit the vulnerability to gain access to the protocol version, internal IP address, Niagara-AX application, and more...

HackerOne: Open-redirect on hackerone.com

Hello! I would like to report about open-redirect on hackerone.com Here is the PoC that redirects to example.com IP address: https://hackerone.com/%2F1572395042 There is one more strange behavior in URL. For example: https://hackerone.com//hackerone.com - works https://hackerone.com//hackerone1.c...

openstack-nova: Nova network denial of service through API filtering

A denial of service flaw was found in the way OpenStack Compute nova looked up VM instances based on an IP address filter. An attacker with sufficient privileges on an OpenStack installation with a large amount of VMs could use this flaw to cause the main nova process to block for an extended...

Updated ntp packages fix security vulnerabilities

Updated ntp packages fix security vulnerabilities: The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting th...

CVE-2015-1799

The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service synchronization loss by spoofing the...

Cisco Content Services Switch (11500) Unauthenticated Port Forwarding Vulnerability

A vulnerability in the Management Interface of the Cisco Content Services Switch 11500 could allow an unauthenticated, remote attacker to gain unauthorized access to other devices on the network. The vulnerability is due to improper handling of SSH packets. An attacker could exploit this...

XSSYA v2.0 - Cross Site Scripting Scanner & Vulnerability Confirmation

XSSYA Cross Site Scripting Scanner & Vulnerability Confirmation written in python scripting language confirm the XSS Vulnerability in two method first work by execute the payload encoded to bypass Web Application Firewall which is the first method request and responseif it respond 200 it turn...

Sql injection

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor NPM before 11.5, NetFlow Traffic Analyzer NTA before 4.1, Network Configuration Manager NCM before 7.3.2, IP...

CVE-2014-9566

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor NPM before 11.5, NetFlow Traffic Analyzer NTA before 4.1, Network Configuration Manager NCM before 7.3.2, IP...

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

Design/Logic Flaw

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

Sagem F@st 3304-V2 - Telnet Crash (PoC)

Sagem F@st 3304-V2 - Telnet Crash PoC Title : Sagem F@st 3304-V2 Telnet Crash POC Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304-V1, other versions may also be affected Date : 2015-03-08 Author : Loudiyi Mohamed Contact : [email protected] Blog :...

CVE-2015-1595

The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream...

CVE-2015-1595

Summary of CVE-2015-1595 : The Siemens SPCanywhere mobile apps (Android and iOS) are vulnerable due to unencrypted system ID to IP address lookups, enabling a network-position attacker to observe alarm system IPs and potentially redirect clients. The issue is described as a lack of encryption dur...

SolarWinds IP Address Manager (IPAM) Detection (HTTP)

HTTP based detection of SolarWinds IP Address Manager IPAM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

LG On Screen Phone authentication bypass

Authentication is IP address based...

Traidnt Up 3.0 SQL injection Exploit

Exploit for php platform in category web applications '; else echo ' http://site.com/path/: user: &n...

Windows Manage PXE Exploit Server

This module provides a PXE server, running a DHCP and TFTP server. The default configuration loads a linux kernel and initrd into memory that reads the hard drive; placing a payload to install metsvc, disable the firewall, and add a new user metasploit on any Windows partition seen, and add a uid...

PXE Boot Exploit Server

This module provides a PXE server, running a DHCP and TFTP server. The default configuration loads a linux kernel and initrd into memory that reads the hard drive; placing a payload to install metsvc, disable the firewall, and add a new user metasploit on any Windows partition seen, and add a uid...