3359 matches found
Advanced tools: Process Hacker
Process Hacker is a very valuable tool for advanced users. It can help them to troubleshoot problems or learn more about specific processes that are running on a certain system. It can help identify malicious processes and tell us more about what they are trying to do. Background information...
SEMCMS cross-site scripting vulnerability (CNVD-2019-01719)
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A cross-site scripting vulnerability exists in SEMCMS version 3.4, which can be exploited by a remote attacker to inject arbitrary Web script or HTML into the copyright text box of the admin/SEMCMSMain.p...
ASUS RT-AC58U Information Disclosure Vulnerability
ASUS RT-AC58U is a wireless router product from ASUS. A security vulnerability exists in ASUS RT-AC58U version 3.0.0.4.3806516. The vulnerability can be exploited by a remote attacker to obtain the hostname and IP address by reading the dhcpLeaseInfo data in the HTML source code of the...
PT-2018-14392
Name of the Vulnerable Software and Affected Versions ASUS RT-AC58U version 3.0.0.4.380 6516 Description The issue allows remote attackers to discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the "Main Login.asp" page. Recommendations For version...
Chaturbate: Unrestricted POST request size on roomlogin endpoint
POST requests to endpoint /roomlogin/ are not limited in size. While the main website login endpoint correctly limits the size of request, this endpoint does not. This can be a mean to perform a DOS attack. Steps To Reproduce: 1. has a password-protected stream. 2. Send a large POST request to...
PT-2018-3640 · Wikimedia +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.1 Description: The issue is related to a lack of input validation mechanism in MediaWiki, which can be exploited by a remote attacker to impact data integrity. Specifically, when MediaWiki:Mainpage is set to...
CVE-2018-11240
An issue was discovered on SoftCase T-Router build 20112017 devices. There are no restrictions on the 'exec command' feature of the T-Router protocol. If the command syntax is correct, there is code execution both on the other modem and on the main servers. This is fixed in production builds as o...
PT-2018-10418
Name of the Vulnerable Software and Affected Versions SoftCase T-Router build 20112017 Description An issue was discovered where there are no restrictions on the 'exec command' feature of the T-Router protocol. If the command syntax is correct, this allows code execution both on the other modem a...
CVE-2018-11240: Incorrect Permission Assignment for Critical Resource
An issue was discovered on SoftCase T-Router build 20112017 devices. There are no restrictions on the 'exec command' feature of the T-Router protocol. If the command syntax is correct, there is code execution both on the other modem and on the main servers. This is fixed in production builds as o...
CVE-2018-10763
Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...
CVE-2018-10763: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...
PT-2018-10092
Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities can be exploited via the Main heading or Sub heading fields in the Partial Branding configuratio...
DEBIAN-CVE-2018-5389
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...
UBUNTU-CVE-2018-5389
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...
CVE-2018-5389
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...
PT-2018-16941
Name of the Vulnerable Software and Affected Versions Internet Key Exchange IKE version 1 Description The Internet Key Exchange v1 main mode is susceptible to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol...
CVE-2018-5389: Weak Password Requirements
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...
SeaCMS Code Execution Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in SeaCMS version 6.61, which originates from the 'parseIf' function in the include/main.class.php file...
