861 matches found
网康 NS-ASG 6.2 用安全网关 /protocol/iscdevicestatus/getsysdatetime.php 命令执行漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 /3g/index.php SQL注入
No description provided by source...
NS-ASG 应用安全网关 resetpwd.php等10处 SQL注入漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 6.3 vpnweb/resetpwd/resetpwd.php 等文件 SQL注入漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 6.3 /vpnweb/index.php?para=index sql注入漏洞
No description provided by source...
Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates (CTX206001)
A number of vulnerabilities have been identified in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that could allow a malicious, unprivileged user to perform privileged operations or execute commands. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions mig...
网康 NS-ASG 应用安全网关命令执行漏洞
No description provided by source...
NS-DV7500企业级高性能VPN安全网关命令执行漏洞
No description provided by source...
DNS Enumeration Script: DNSRecon
DNS reconnaissance is part of the information gathering stage on a penetration test engagement. When a penetration tester is performing a DNS reconnaissance he is trying to obtain as much information as he can regarding the DNS servers and their records. The information that can be gathered can...
CVE-2014-8762
The ajaxmediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter...
JVN#20812625: Advance-Flow vulnerable to SQL injection
Advance-Flow provided by OSK Co., LTD contains an issue in processing input data, which may result in SQL injection. Impact A user may obtain or alter information on the database. Solution Do not use Advance-Flow The developer has stated that the support of Advance-Flow has been discontinued thus...
NS Utilities 1.0 - Unspecified Remote Issue
The NS Utilities WordPress plugin was affected by an Unspecified Remote Issue security vulnerability...
WordPress NS Utilities Plugin <= 1.0 - Unspecified Remote Issue
This plugin is prone to an unspecified remote issue. Solution Update the plugin...
PHP 5.3.x DoS
No description provided by source. //DOS Php 5.3.x // //Title: Dos Php 5.3.0 //Vendor: http://php.net //Tested On Php 5.3.0 On Windows xp Sp3 And Redhat // //AUTHOR: ITSecTeam //Email: [email protected] //Website: http://www.itsecteam.com //Forum : http://forum.ITSecTeam.com //Original Advisory:...
PostNuke 0.6x/0.7x NS-Languages Module language Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16752/info PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation could allow an attacker to...
PostNuke 0.6x/0.7x NS-Languages Module language Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/16752/info PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation could allow an attacker to...
Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)
Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...
Omron NS Series HMI Vulnerabilities
OVERVIEW Researcher Joel Sevilleja Febrer of S2 Grupo has identified multiple vulnerabilities in Omron Corporation’s NS series human-machine interface HMI terminals. Omron Corporation has produced an update that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely...
[Responder] a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server
Responder is a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. This tool is first an LLMNR and NBT-NS responder, it will answer to specific NBT-NS NetBIOS Name...
CVE-2013-7282
The CVE-2013-7282 entry describes an authentication-bypass vulnerability in the management web interfaces of Nisuta NS-WIR150NE (firmware 5.07.41) and NS-WIR300N (firmware 5.07.36_NIS01). The root cause is improper handling of the HTTP Cookie: :language=en header, permitting remote attackers to b...