CVE-2017-6780

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient...

CVE-2016-6534

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

Critical Flaws Found in NETGEAR Network Management System

Netgear, one of the most popular router manufacturers, has been vulnerable to two different flaws that could allow hackers to compromise your corporate network and connected devices. Reported critical vulnerabilities reside in the Netgear's ProSafe NMS300 Model Network Management System – a...

Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities

Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300 Discovered by Pedro Ribeiro [email protected], Agile Information Security http://www.agileinfosec.co.uk/ ========================================================================== Disclosure:...

SevOne NMS 5.3.6.0 - Remote Command Execution

!/usr/bin/env python Exploit Title: SevOne NMS = 5.3.6.0 reverse shell remote root Date: 01/14/2016 Exploit Author: @iamsecurity Vendor Homepage: https://www.sevone.com/ Software Link: https://www.sevone.com/download2/free/vimage/SevOne-Download.ova Version: 5.3.6.0 """sevone.py: Simple reverse...

Cisco Connected Grid Network Management System权限提升漏洞

No description provided by source...

Cisco Connected Grid Network Management System Elevation of Privilege Vulnerability

Cisco Connected Grid Network Management System CG-NMS is an end-to-end smart grid management system from Cisco. A security vulnerability exists in the web GUI of Cisco CG-NMS version 3.00.35 and 3.00.54. A remote attacker can exploit the vulnerability via the Monitor-Only role to bypass establish...

Design/Logic Flaw

The web GUI in Cisco Connected Grid Network Management System CG-NMS 3.00.35 and 3.00.54 allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640...

Cisco Connected Grid Network Management System Privilege Escalation Vulnerability

A vulnerability in the web GUI of Cisco Connected Grid Network Management System could allow an authenticated, remote attacker to perform limited configuration changes while logged in as a user having the Monitor-Only role. The vulnerability is due to insufficient authorization controls. An...

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl observer = 0.3.2.1 Remote Command Execution Script: Observer is an autodiscovering PHP/MySQL/SNMP/CDP...

Cisco Prime Data Center Network Manager Web Detection

The web interface for Cisco Prime Data Center Network Manager DCNM was detected on the remote host. DCNM is used to manage virtualized data centers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67246; scriptversion"1.10";...

Cisco Connected Grid Network Management System SQL Injection Vulnerabilities

A vulnerability in device management of the Cisco Connected Grid Network Management System CG-NMS could allow an unauthenticated, remote attacker to modify data in the CG-NMS database by using SQL injection. The vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2013-1163

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...

CVE-2013-1171

Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...

CVE-2013-1171

Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...

Alcatel-Lucent OmniVista 4760 Network Management System "lang"目录遍历漏洞

BUGTRAQ ID: 46624 CVE ID: CVE-2011-0345 Alcatel-Lucent OmniVista 4760 Network Management System可提供网络安全和优化的管理应用程序集。 Alcatel-Lucent OmniVista 4760 Network Management System在实现上存在目录遍历漏洞，攻击者可利用此漏洞使用目录遍历字符串从受影响系统中检索任意文件。 Alcatel Alcatel-Lucent OmniVista 4760 Network Management S 5.1.06.03 Alcatel...

LANDesk管理套件HTML表单请求命令注入漏洞

BUGTRAQ ID: 44781 CVE ID: CVE-2010-2892 Landesk管理套件是一款网络管理系统，可控制桌面，服务器和移动设备等。 Landesk没有正确地验证提交特制请求的用户来源。如果管理员使用攻击者的浏览器登录到了设备，攻击者就可以以gsbadmin用户权限执行任意代码。 LANDesk Software LANDesk Management Gateway 4.2 GSBWEB v1.61 LANDesk Software LANDesk Management Gateway 4.0 GSBWEB v1.61s 临时解决方法： 1...

Zabbix Server - Multiple Vulnerabilities

Zabbix Server - Multiple Vulnerabilities Zabbix Server : Multiple remote vulnerabilities From: Nicob Date: Sun, 13 Dec 2009 16:28:35 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and oth...

Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities ================================================================== :::::::-. ... ::::::. :::. ;;, ';, ;;...

Debian Security Advisory DSA 1374-1 (jffnms)

The remote host is missing an update to jffnms announced via advisory DSA 1374-1. OpenVAS Vulnerability Test $Id: deb13741.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1374-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...