483 matches found
NetFlow Analyzer 4 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15127/info NetFlow Analyzer 4 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
NetFlow Analyzer 5 /jspui/appConfig.jsp task Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...
NetFlow Analyzer 5 netflow/jspui/index.jsp view Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...
NetFlow Analyzer 5 /jspui/applicationList.jsp alpha Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...
Vulnerability Management: Think Like an Attacker to Prioritize Risks
Attackers care about ROI – they want to accomplish their objective with the least investment of time and resources possible. The same is true for you - to most effectively manage vulnerabilities, you need to think like an attacker. Ask yourself: How would you go about compromising systems,...
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 Default MySQL Credential (CVE-2012-3951)
An insecure default credentials config has been reported in Plixer Scrutinizer. The vulnerability is due to an insecure config of default credentials in the MySQL server. The attacker could log into MySQL server with the default credentials, and then gain arbitrary remote code execution...
Scrutinizer < 10.1.2 Multiple Vulnerabilities
The version of Scrutinizer NetFlow and sFlow Analyzer running on the remote host is a version prior to 10.1.2, and is, therefore, potentially affected by the following vulnerabilities : - A blind SQL injection vulnerability exists because the 'orderby' and 'gadget' parameters of 'faweb.cgi' fail ...
Plixer Scrutinizer NetFlow and sFlow Analyzer HTTP Authentication Bypass (CVE-2012-2626)
An authentication bypass vulnerability has been reported in Plixer Scrutinizer NetFlow and sFlow Analyzer...
TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer
Trustwave SpiderLabs Security Advisory TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer Published: 07/27/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow and sFlow Analyzer Version affected: Confirmed 9.0.1 Build...
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 Default MySQL Credential
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Plixer Scrutinize...
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 Default MySQL Credential
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
Plixer Scrutinizer NetFlow and sFlow Analyzer HTTP Authentication Bypass
This will add an administrative account to Scrutinizer NetFlow and sFlow Analyzer without any authentication. Versions such as 9.0.1 or older are affected. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 Default MySQL Credential
This exploits an insecure config found in Scrutinizer NetFlow & sFlow Analyzer. By default, the software installs a default password in MySQL, and binds the service to "0.0.0.0". This allows any remote user to login to MySQL, and then gain arbitrary remote code execution under the context of...
Scrutinizer NetFlow / sFlow Analyzer 9.0.1 XSS / Bypass / File Upload
Exploit for php platform in category web applications Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow and sFlow Analyzer Version affected: Confirmed 9.0.1 Build 9.0.1.19899 and prior versions may be affected as well. Please note that the software can be found in a...
Scrutinizer NetFlow / sFlow Analyzer 9.0.1 XSS / Bypass / File Upload
Trustwave SpiderLabs Security Advisory TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer Published: 07/27/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow and sFlow Analyzer Version affected: Confirmed 9.0.1 Build...
Scrutinizer NetFlow & sFlow Analyzer Detection
Scrutinizer NetFlow & sFlow Analyzer, a network traffic analysis tool, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58992; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Scrutinizer NetFlow & sFlow...
TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer
Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow a...
Plixer Scrutinizer NetFlow and sFlow Analyzer multiple security vulnerabilities
Authentication bypass, SQL injection, crossite scripting...
Scrutinizer NetFlow sFlow Analyzer - Multiple Vulnerabilities
Scrutinizer NetFlow sFlow Analyzer - Multiple Vulnerabilities Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer...
Scrutinizer NetFlow & sFlow Analyzer Multiple Vulnerabilities
Exploit for multiple platform in category web applications Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer...