The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.

The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment. This is achieved by usi...

Cross-site scripting vulnerability

A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...

CVE-2016-1439

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability

Cisco Unified Contact Center Enterprise is a set of IP-based contact center components from Cisco. It provides intelligent contact routing, call processing, network-to-desktop computer telephony integration CTI, and multi-channel contact management capabilities over an IP infrastructure. A...

CVE-2016-1396

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a...

Cisco Wireless LAN Controller Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller WLC devices running Cisco AireOS Softwar Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

squid: buffer overflow in cachemgr.cgi

A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code...

How To perform Emergency Network Reset on Citrix Hypervisor/XenServer

To configure or restore the management interface from either XSCONSOLE or from CLI command-line interface...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

Web Interface for DNSmasq / Mikrotik - SQL Injection

/ + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DNSDHCP-WEB-INTERFACE-SQL-INJECTION.txt + ISR: apparitionsec Vendor: ==================== tmcdos / sourceforge Product: ====================== dnsdhcp Web Interface Download:...

Cisco Wireless LAN Controller Web Management Interface Denial of Service Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A denial of service vulnerability in the Web management interface of the Cisco Wireless LAN Controller WLC Software could allow an...

The vulnerability of the microprogramming software of the Medialink MWN-WARP300N router allows a hacker to enhance their privileges.

The vulnerability of the web-management interface of the Medialink MWN-WARP300N router software relates to the use of default passwords for user accounts. Exploiting this vulnerability could allow an attacker to gain increased privileges by utilizing Wi-Fi sessions...

Multiple Lenovo LenovoEMC Devices Information Disclosure Vulnerability

Lenovo LenovoEMC EZ Media and Backup hm3 and others are firmware developed by the Chinese company Lenovo Lenovo for use in network storage devices. A security vulnerability exists in the management interface of several Lenovo LenovoEMC devices, which can be exploited by remote attackers to obtain...

CVE-2016-3655

The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call...

CVE-2016-3654

The device management command line interface CLI in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter...

Design/Logic Flaw

The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call...

CVE-2015-8108

The management interface in LenovoEMC EZ Media & Backup hm3, ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors...

Design/Logic Flaw

The management interface in LenovoEMC EZ Media & Backup hm3, ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors...

CVE-2015-8108

The management interface in LenovoEMC EZ Media & Backup hm3, ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors...