382 matches found
OSSIM 2.1 - SQL Injection and xss
No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...
AlienVault OSSIM < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution
No description provided by source. Exploit Title: AlienVault OSSIM 4.7.0 av-centerd 'getlogline' Remote Code Execution Date: 06/17/2014 Exploit Author: Alfredo Ramirez Vendor Homepage: http://www.alienvault.com/ Software Link: http://www.alienvault.com/open-threat-exchange/projects Version: 4.7.0...
OSSIM 2.1.5 - Remote Command Execution
No description provided by source...
AlienVault OSSIM 4.6.1 - Authenticated SQL Injection
No description provided by source. Exploit Title: AlienVault newpolicyform.php SQLi Date: 5/9/2014 Exploit Author: chrisdhebertatgmail.com Vendor Homepage: http://www.alienvault.com/ Software Link: http://www.alienvault.com/free-downloads-services Version: 4.6.1 and below Tested on: Linux CVE : n...
OSSIM 2.2.1 '$_SERVER['PHP_SELF']' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39145/info OSSIM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
AlienVault OSSIM 4.1.2 - Multiple SQL Injection Vulnerabilities
No description provided by source. RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities Vendor Website : http://www.alienvault.com INDEX --------------------------------------- 1. Background 2. Description 3. Affected Products 4. Vulnerabilities 5. Solution ...
AlienVault OSSIM av-centerd Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include...
Alienvault OSSIM Open Source SIEM 3.1 - Multiple Security Vulnerabilities
No description provided by source...
AlienVault OSSIM SQL Injection and Remote Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
OSSIM < 4.3.2 Multiple SQL Injection Vulnerabilities
The version of OSSIM hosted on the remote host has multiple SQL injection vulnerabilities due to a failure to sanitize the 'datefrom' parameter to multiple scripts in the '/RadarReport' and '/geoloc' paths. A remote, unauthenticated attacker could potentially exploit this vulnerability to execute...
AlienVault OSSIM 'av-centerd' get_file() Information Disclosure
The remote host is running a version of AlienVault Open Source Security Information Management OSSIM that is affected by an information disclosure vulnerability in the 'av-centerd' SOAP service due to a failure to sanitize user input to the 'getfile' method. A remote, unauthenticated attacker can...
OSSIM < 4.3.3.1 tele_stats.php SQL Injection
The OSSIM install hosted on the remote host has a SQL injection vulnerability. Input to the 'stat' parameter of the '/ossim/ocsreports/telestats.php' script is not properly sanitized. A remote attacker could potentially exploit this to execute arbitrary SQL commands as the MySQL 'root' user...
AlienVault OSSIM 'av-centerd' set_file() Remote Code Execution
The remote host is running a version of AlienVault Open Source Security Information Management OSSIM that is affected by a remote code execution vulnerability in the 'av-centerd' SOAP service due to a failure to sanitize user input to the 'setfile' method. A remote, unauthenticated attacker can...
Alienvault Open Source SIEM (OSSIM) - av-centerd Command Injection (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'AlienVault OSSIM av-centerd Command Injection', 'Description' = %q This module exploits a code execution fla...
OSSIM SOAP Service Detection
Binary data ossimsoapdetect.nbin...
AlienVault OSSIM 'av-centerd' Remote Code Execution
The remote host is running a version of AlienVault Open Source Security Information Management OSSIM that is affected by a remote code execution vulnerability in the 'av-centerd' SOAP service due to a failure to sanitize user input to the 'getlogline' method. A remote, unauthenticated attacker ca...
AlienVault OSSIM Multiple RCE Vulnerabilities
AlienVault OSSIM is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
AlienVault OSSIM av-centerd Util.pm RCE
Remote code execution vulnerability in AlienVault OSSIM av-centerd Util.pm Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
AlienVault Open Source SIEM (OSSIM) 'timestamp' Parameter Directory Traversal Vulnerability
AlienVault Open Source SIEM OSSIM SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
AlienVault OSSIM av-centerd Command Injection
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'AlienVault OSSIM av-centerd Command Injection', 'Description' = %q This module exploits a code execution fla...