GPON Home Router FTP G-93RG1 - Cross-Site Request Forgery / Command Execution

CSRF Demo Exploit -- document.auto.submit;...

Windows Powershell Execution Post Module

This module will execute a powershell script in a meterpreter session. The user may also enter text substitutions to be made in memory before execution. Setting VERBOSE to true will output both the script prior to execution and the results. This module requires Metasploit:...

Cross site scripting

Cross-site scripting XSS vulnerability in the login page in Cisco Network Analysis Module NAM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269...

CVE-2015-0656

Cross-site scripting XSS vulnerability in the login page in Cisco Network Analysis Module NAM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269...

CVE-2015-0656

CVE-2015-0656 affects Cisco Network Analysis Module (NAM) – a Cross-Site Scripting (XSS) vulnerability in the NAM login page caused by insufficient input validation. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Cisco advisories confirm the vulnerabili...

CVE-2015-0656

Cross-site scripting XSS vulnerability in the login page in Cisco Network Analysis Module NAM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269...

CVE-2014-5215

NetIQ Access Manager NAM 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to 1 roma/jsp/volsc/monitoring/devservices.jsp or 2 roma/jsp/debug/debug.jsp...

CVE-2014-5214

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager NAM 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, relat...

CVE-2014-9412

Technical details for CVE-2014-9412 are not publicly available in the provided documents; monitor for updates.

CVE-2014-5217

CVE-2014-5217 affects NetIQ Access Manager (NAM) 4.x prior to 4.1. The CSRF in the webacc servlet allows an authenticated admin session to change the administrative password via fw.SetPassword. The vulnerability requires an authenticated administrator and is documented alongside other issues (XXE...

CVE-2014-5216

NetIQ Access Manager (NAM) 4.x is affected by multiple reflected XSS vulnerabilities (CVE-2014-5216) in NAM prior to 4.0.1 HF3. The issues allow remote attackers to inject arbitrary script via (1) location in dev.Empty to nps/servlet/webacc, (2) error in nidp/jsp/x509err.jsp, (3) lang in sslvpn/a...

CVE-2014-5215

NetIQ Access Manager (NAM) 4.x prior to 4.0.1 HF3 is affected by CVE-2014-5215. An authenticated administrator can disclose service-account passwords via requests to roma/jsp/volsc/monitoring/dev_services.jsp or roma/jsp/debug/debug.jsp, constituting an information-disclosure vulnerability (impac...

CVE-2014-5214

The CVE-2014-5214 issue affects NetIQ Access Manager (NAM) 4.x, specifically the iManager Administration Console's nps/servlet/webacc component. It enables an XML External Entity (XXE) injection via a query parameter containing an XML entity declaration, allowing remote authenticated novlwww user...

WordPress Plugin SP Client Document Manager 2.4.1 - SQL Injection

Vulnerability title: Multi SQL Injection in SP Client Document Manager plugin CVE: N/A Vendor: http://smartypantsplugins.com Plugin: SP Client Document Manager Download link: https://wordpress.org/plugins/sp-client-document-manager/ Affected version: version 2.4.1 and previous version Google dork...

SA-CONTRIB-2014-098 - CKEditor - Cross Site Scripting (XSS)

The CKEditor module and its predecessor, FCKeditor module allows Drupal to replace textarea fields with CKEditor 3.x/4.x FCKeditor 2.x in case of FCKeditor module - a visual HTML editor, sometimes called WYSIWYG editor. Both modules define a function, called via an ajax request, that filters text...

Wing FTP Server Authenticated Command Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::CmdStager include Msf::Exploit::Remote::HttpClient def...

Apple QuickTime nam Atom Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the nam atom in ...

Facebook Game - Poker Texas Hold'em Boyaa Viet Nam Detected (deprecated)

Binary data 6439.prm...

Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability

Cisco Catalyst 6000, 6500 series and Cisco 7600 series that have a Network Analysis Module installed are affected by a vulnerability, which could allow an attacker to gain complete control of the system. Only Cisco Catalyst systems that have a NAM on them are affected. This vulnerability affects...

CVE-2007-1467

The CVE-2007-1467 entry describes multiple cross-site scripting (XSS) vulnerabilities affecting Cisco Secure Access Control Server and related Cisco products. The root issue is insufficient input filtering in the search form used by PreSearch.html and PreSearch.class, allowing remote attackers to...