PT-2014-7801

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.0 through 10.1-129.10 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before 10.5-50.10 Description The issue is...

F5 Networks BIG-IP : XSS vulnerability viewing logs from the web management interface (SOL8602)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL8602. The text description of this plugin is C F5 Networks...

PT-2014-5291

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS versions 7.08E4 and earlier Cisco Intrusion Detection System IDS affected versions not specified Description The issue is related to the authentication-manager process in the web framework, which does not...

F5 Networks BIG-IP : Linux kernel TCP ISN vulnerability (K15301)

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

F5 Networks BIG-IP : XSS vulnerability viewing logs from the Console section of the web management interface (SOL8599)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL8599. The text description of this plugin is C F5 Networks...

Cisco Intrusion Prevention System MainApp Denial of Service Vulnerability

A vulnerability in the web framework of Cisco Intrusion Prevention System IPS Software could allow an authenticated, remote attacker to cause MainApp to hang intermittently because the authentication manager process creates a denial of service DoS condition. The vulnerability is due to improper...

Cross site scripting

Cross-site scripting XSS vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject arbitrary...

PT-2014-7029

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web versions 7.x before 7.0.0-ISS-WGA-IF0009 IBM Security Access Manager for Web versions 8.x before 8.0.0-ISS-WGA-FP0005 IBM Security Access Manager for Mobile versions 8.x before 8.0.0-ISS-ISAM-FP0005...

CVE-2014-6079: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject arbitrary...

CVE-2013-3083

Cross-site request forgery CSRF vulnerability in cgi-bin/systemsetting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remotemgmtenabled and remotemgmtport parameter...

CVE-2013-3083

Cross-site request forgery CSRF vulnerability in cgi-bin/systemsetting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remotemgmtenabled and remotemgmtport parameter...

PT-2014-2654

Name of the Vulnerable Software and Affected Versions Belkin F5D8236-4 version v2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remote mgm...

SOL15623 - GnuTLS vulnerability CVE-2009-5138

Recommended Action For affected ARX systems, F5 recommends that you expose the management interface only on trusted networks. Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602:...

WebTitan Web Interface Default Credentials

The remote WebTitan web interface uses a default set of credentials 'admin' / 'hiadmin' to control access to its management interface. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain administrative access to the application. %NASLMINLEVEL 70300 C...

SuperMicro IPMI 4 9 1 5 2 port password leak vulnerability-vulnerability warning-the black bar safety net

2014.06.20 SuperMicro IPMI 4 9 1 5 2 port password leak vulnerability is the foreign media communications http://arstechnica.com/security/2014/06/at-least-32000-servers-broadcast-admin-passwords-in-the-clear-advisory-warns/）,the spirit of the vulnerability of the curious, this article on the...

PlumeCMS <= 1.2.4 - Multiple Persistent XSS

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com...

ZyXEL ZyWALL 2 3.62 Forms/General_1 sysSystemName Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25262/info ZyXEL ZyWALL 2 is prone to multiple remote vulnerabilities that affect the management interface. An attacker can exploit these issues to carry out cross-site request forgery, HTML-injection, and denial-of-servi...

F5 BIG-IP 9.4.3 - Web Management Interface Console HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28151/info F5 BIG-IP Web Management Interface is prone to a HTML-injection vulnerability because the web management interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Sitecom WLM-2501 CSRF Vulnerabilities

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 Change Wireless Passphrase Date : 13-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com...

VMware ESX 2.x Multiple Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19249/info VMware ESX is prone to multiple information-disclosure vulnerabilities. These issues are due to a design error in the application. The following issues were reported: 1. An information disclosure vulnerability...