Plixer Scrutinizer NetFlow and sFlow Analyzer HTTP Authentication Bypass

This will add an administrative account to Scrutinizer NetFlow and sFlow Analyzer without any authentication. Versions such as 9.0.1 or older are affected. Module Options msf use auxiliary/admin/http/scrutinizer/adduser msf undefinedadduser show actions ...actions... msf undefinedadduser set ACTI...

Plixer Scrutinizer NetFlow and sFlow Analyzer 9 Default MySQL Credential

This exploits an insecure config found in Scrutinizer NetFlow & sFlow Analyzer. By default, the software installs a default password in MySQL, and binds the service to "0.0.0.0". This allows any remote user to login to MySQL, and then gain arbitrary remote code execution under the context of...

Scrutinizer NetFlow & sFlow Analyzer Detection

Scrutinizer NetFlow & sFlow Analyzer, a network traffic analysis tool, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58992; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Scrutinizer NetFlow & sFlow...

TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer

Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow a...

Plixer Scrutinizer NetFlow and sFlow Analyzer multiple security vulnerabilities

Authentication bypass, SQL injection, crossite scripting...

Scrutinizer NetFlow & sFlow Analyzer Multiple Vulnerabilities

Exploit for multiple platform in category web applications Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer...

Scrutinizer NetFlow sFlow Analyzer - Multiple Vulnerabilities

Scrutinizer NetFlow sFlow Analyzer - Multiple Vulnerabilities Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer...

Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow a...

Scrutinizer 8.6.2 Bypass / Cross Site Scripting / SQL Injection

Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow a...

Manageengine Opmanager v8.8 - SQL Injection Vulnerability

Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...

Manageengine Opmanager v8.8 - SQL Injection Vulnerability

Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...

Netflow Looping Denial Of Service

Automated Looping Problem on NetFlow Analyzer 7 professional Plus code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda Company AKSIT Services Vulnerable Software:ManageEngine NetFlow Analyzer 7 professional Plus Date:19-Nov-2009 Tested on Window os Browser Mozilla/IE8 About...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 section parameters. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2009-3903

CVE-2009-3903 : ManageEngine NetFlow Analyzer 7.5 build 7500 contains XSS in jspui/index.jsp. The vulnerability allows remote injection of arbitrary web script/HTML via the GET/POST parameters (view, section). No remediation details are provided in the supplied documents.

CVE-2009-3903

Multiple cross-site scripting XSS vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 section parameters. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2009-3903: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 section parameters. NOTE: the provenance of this information is unknown; the details are obtained...

Ethereal Netflow Dissector Buffer Overflow (CVE-2004-0176)

There is a buffer overflow in the NetFlow dissector within Ethereal, a program that has the ability to decode packets containing NetFlow packet data as per Cisco's specification. A simple exploit of this vulnerability, where the buffer is overrun with arbitrary data, will result in the terminatio...

FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...

netflow-xss.txt

NetFlow Analizer 5 & OpManager 7 multiple XSS vendor url:http://www.adventnet.com/ advisore:http://lostmon.blogspot.com/2007/07/ netflow-analizer-5-opmanager-7-multiple.html vendor notify:yes exploits include:yes NetFlow Analizer and OpManager contains a flaw that allows a remote cross site...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...