Distimo Monitor - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54757/info Distimo Monitor is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Scrutinizer NetFlow / sFlow Analyzer 9.0.1 XSS / Bypass / File Upload

Exploit for php platform in category web applications Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow and sFlow Analyzer Version affected: Confirmed 9.0.1 Build 9.0.1.19899 and prior versions may be affected as well. Please note that the software can be found in a...

Distimo Monitor 6.0 Cross Site Scripting

Exploit for php platform in category web applications Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities Introduction: ============= Distimo Monitor allows developers to track their daily download and revenue figures from all app stores in one convenient place. View application rankings in...

SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities

/ Exploit Title: SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities Date: Jul 21 2012 Author: muts Version: SolarWinds Orion Network Performance Monitor 10.2.2 Vendor URL: http://www.solarwinds.com/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012:...

SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities

Exploit for windows platform in category web applications / Exploit Title: SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities Date: Jul 21 2012 Author: muts Version: SolarWinds Orion Network Performance Monitor 10.2.2 Vendor URL: http://www.solarwinds.com/ Timeline: 29 M...

SA-CONTRIB-2012-114 - Campaign Monitor - Cross Site Scripting (XSS)

This module enables you to integrate Campaign Monitor into Drupal so you can give users the ability to subscribe and unsubscribe for your Campaign Monitor lists. The module doesn't sufficiently validate strings entered in the administration interface. This vulnerability is mitigated by the fact...

NGS00195 Patch Notification: Nagios XI Network Monitor Stored and Reflected XSS

High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Stored and Reflected XSS Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of...

NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection

High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Blind SQL Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...

NGS00196 Patch Notification: Nagios XI Network Monitor OS Command Injection

High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor OS Command Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...

Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities

Document Title: =============== Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=631 Release Date: ============= 2012-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 6...

Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities

Document Title: =============== Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=631 Release Date: ============= 2012-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 6...

kernel: kvm: device assignment DoS

The kvmvmioctlassigndevice function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service host OS crash via a...

Restoring Deleted Alarms

Purpose All alarms configured in Veeam ONE were deleted by mistake, and you need to get them back. Solution The steps below will restore all alarms that were ever configured in Veeam ONE and then deleted. 1. Execute the following SQL script against the Veeam ONE database: UPDATE monitor.Alarm SET...

WordPress Download Monitor 3.3.5.4 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

Disabling Collection of Historical Performance Data

How to disable collection of historical performance data and use Veeam ONE Monitor for real-time monitoring only...

Fedora Update for kgamma FEDORA-2011-13417

Check for the Version of kgamma OpenVAS Vulnerability Test Fedora Update for kgamma FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

How to Run Multiple Instances of the Veeam One Client

Purpose This article documents to enable multiple instances of the Veeam ONE Client to be launched on the same machine. By default attempting to launch a second Veeam ONE Client while one is already running will change focus to the existing running Veeam ONE Client. The setting document in this...

Barracuda Cloud CC v3.04.015 - Multiple Web Vulnerabilities

Exploit for cgi platform in category web applications Title: ====== Barracuda Cloud CC v3.04.015 - Multiple Web Vulnerabilities Introduction: ============= The Barracuda Control Center is a comprehensive cloud-based service that enables administrators to monitor and configure multiple Barracuda...

Epson EventManager 'x-protocol-version' Denial of Service Vulnerability

This host is running Epson EventManager and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodepsoneventmanagerdosvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Epson EventManager 'x-protocol-version' Denial of Service Vulnerability Authors: Sooraj KS Copyright:...

Disabling client authorization check on Veeam ONE Monitor Server

Purpose There might be several reasons to disable client authorization check on the Veeam Monitor Server: 1. It is necessary to use Veeam ONE Monitor Client outside the domain to which Veeam ONE Monitor Server belongs. 2. ​It is necessary to disable or bypass client account authentication to...