CVE-2017-10145

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2017-10104

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Java...

Symantec Management Console Installed

Binary data symantecmanagementconsoledetect.nbin...

App Layering: No connection to Layering Service and other web errors

You get unexpected errors and disconnects in the App Layering Management Console. While logged in, you may see "Connectivity Failure" or a status of the ELM saying "No connection to Layering Service"...

Unspecified Vulnerability in Oracle Java Advanced Management Console

Oracle Java SE is Oracle's suite of standard edition Java platforms for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. java Advanced Management Console is one of the Java Advanced Management Console components for creating...

Unspecified Vulnerability in Oracle Hospitality Simphony

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation, of which Hospitality Simphony is a cloud-based hospitality management component. A security vulnerability exists in the Enterprise Management...

How to fix App Layering tasks stuck at "Stalled" status

Tasks stuck in ELM management console stuck in a "Stalled" state...

Oracle Java SE Multiple Vulnerabilities (July 2017 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 141, 7 Update 151, or 6 Update 161. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the 2D component that allows an unauthenticated, remote...

CVE-2017-11435

The Humax Wi-Fi Router model HG100R- 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token...

Authentication flaw

The Humax Wi-Fi Router model HG100R- 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token...

CVE-2017-11435

The Humax Wi-Fi Router model HG100R- 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token...

CVE-2017-11435

The Humax HG100R-* router (model HG100R- with firmware 2.0.6) is affected by an authentication bypass vulnerability in the management console. The issue arises because the router does not validate the session token for certain API responses under /api, enabling remote attackers to retrieve sensit...

CVE-2017-11435

The Humax Wi-Fi Router model HG100R- 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token...

StoreFront Management console shows error "No Web Receiver Services found within IIS site '-1'. defaultDocument"

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information StoreFront Management console shows error "No Web Receiver Services found within IIS site '-1'...

Trend Micro Deep Discovery Director Multiple Vulnerabilities

1. Advisory Information Title: Trend Micro Deep Discovery Director Multiple Vulnerabilities Advisory ID: CORE-2017-0005 Advisory URL:https://www.coresecurity.com/core-labs/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities Date published: 2017-07-12 Date of last update:...

HUMAX WiFi Router HG-100R DNS Hijacking Vulnerability

The HG-100R is a router. A DNS hijacking vulnerability exists in the HUMAX WiFi Router HG-100R. The vulnerability is caused by first constructing a special request to bypass the authentication of the management console. The vulnerability is due to the router failing to validate the session token...

AWS Auditing & Hardening Tool: Zeus

Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices. It checks security settings according to the profiles the user creates and changes them to recommended settings based on the CIS AWS Benchmark source at request of the user. Identity and Access...

Multiple XML External Entity Injection Vulnerabilities in Symantec Management Console

Symantec Management Console is a management tool console. Multiple XML external entity injection vulnerabilities exist in Symantec Management Console. An attacker could exploit the vulnerabilities to obtain potentially sensitive information or cause a denial of service condition. This could lead ...

Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities

Exploit for linux platform in category web applications 1. Advisory Information Title: Kaspersky Anti-Virus File Server Multiple Vulnerabilities Advisory ID: CORE-2017-0003 Advisory URL: http://www.coresecurity.com/advisories/Kaspersky-Anti-Virus-File-Server-Multiple-Vulnerabilities Date publishe...

Symantec Management Console XSS/XXE Issues

SUMMARY Symantec has released an update to address two issues that were discovered in the Symantec Management Console. AFFECTED PRODUCTS Symantec Management Console --- CVE | Affected Versions | Remediation CVE-2017-6322 CVE-2017-6323 | Prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6 & ITMS 7.6POSTHF7 |...