GCafe 3.0 Unquoted Service Path

Exploit Title: GCafé 3.0 - 'gbClienService' Unquoted Service Path Google Dork: N/A Date: 2019-11-09 Exploit Author: Doan Nguyen 4ll4u Vendor Homepage: https://gcafe.vn/ Software Link: https://gcafe.vn/post/view?slug=gcafe-3.0 Version: v3.0 Tested on: Windows 7, Win 10, WinXP CVE : N/A Description...

Getsup 3.1.45 - Multiple XSS Vulnerability

Usage Info Multiple XSS - Getsup ticketing - XSS 1 : Connect to panel Getsup, Go to yours tickets - All states - Paste your payload on "Number" or "Title" form and press Enter for execute - XSS 2 : Connect to panel Getsup, Go to All tickets - All states - Paste your payload on "Number" or "Title"...

Siemens SCALANCE WLC711 6GK571-10XC00-1AB0 IWLAN Controller Detection

Binary data 765311.prm...

WordPress YITH WooCommerce Points and Rewards plugin <=1.3.5 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce Points and Rewards plugin versions =1.3.5. Solution Update the WordPress YITH WooCommerce Points and Rewards plugin to the latest available version at least 1.3.6...

Multiple Cisco Products Input Validation Error Vulnerability (CNVD-2019-39603)

Cisco Aironet 1540 Series APs and so on are products of Cisco Corporation.Cisco Aironet 1540 Series APs is a 1540 series access point product.Cisco Aironet 1560 Series APs is a 1560 series access point product.Cisco Aironet 1800 Series APs is a 1800 series access point product.Cisco Aironet 1800...

The vulnerability of the VPN packet processing function in the implementation of the Point-to-Point Tunneling Protocol of Cisco Aironet Access Points of models 1560, 2800, 3800, and 4800 allows a hacker to cause a service failure.

The vulnerability of the VPN packet processing function in the implementation of the Point-to-Point Tunneling Protocol of Cisco Aironet Access Points of models 1560, 2800, 3800, and 4800 exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to...

Adobe ColdFusion File Upload (APSB18-33) (CVE-2018-15961)

An arbitrary file upload vulnerability exists in Adobe ColdFusion due to insufficient validation in the filemanager plugin. An unauthenticated, remote attacker can exploit this, via a specially crafted POST request, to upload arbitrary files on the remote host. TRUSTED...

The vulnerability in the implementation of the CAPWAP request analysis procedure for Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, 3800, and 4800 series, as well as Cisco Catalyst network devices, allows a attacker to cause service interruptions.

The vulnerability of the CAPWAP request analysis process implemented in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, 3800, and 4800 series, as well as Cisco Catalyst network devices, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a...

The vulnerability of the BPDU-frames redirection function in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series allows a hacker to cause service failure.

The vulnerability of the BPDU frame redirection function in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Cisco Aironet Access PPTP Denial of Service Vulnerability

Cisco Aironet APs are a family of access access point products. Cisco Aironet Access Points APs have an input validation error vulnerability in the Point-to-Point Tunneling Protocol PPTP VPN packet handling feature. A remote attacker could exploit this vulnerability to cause a reload of the...

Cisco Aironet Access Points Software Access Control Error Vulnerability

Cisco Aironet 1540 Series APs and so on are products of Cisco Corporation.Cisco Aironet 1540 Series APs is a 1540 series access point product.Cisco Aironet 1560 Series APs is a 1560 series access point product.Cisco Aironet 1800 Series APs is an 1800 series access point product.Aironet Access...

Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws

Cisco Systems has released a security update stomping out critical and high-severity flaws impacting its Aironet access points, which are entry-level wireless access points APs used by mid-size enterprises in their offices or small warehouses. It also issued a slew of additional patches addressin...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. The Cybersecurity an...

CVE-2019-15265

A vulnerability in the bridge protocol data unit BPDU forwarding functionality of Cisco Aironet Access Points APs could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless client...

CVE-2019-15264

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol implementation of Cisco Aironet and Catalyst 9100 Access Points APs could allow an unauthenticated, adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

CVE-2019-15264

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol implementation of Cisco Aironet and Catalyst 9100 Access Points APs could allow an unauthenticated, adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

CVE-2019-15260

A vulnerability in Cisco Aironet Access Points APs Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could...

Race condition

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol implementation of Cisco Aironet and Catalyst 9100 Access Points APs could allow an unauthenticated, adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

Improper access control

A vulnerability in Cisco Aironet Access Points APs Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could...

CVE-2019-15265 Cisco Aironet Access Points Bridge Protocol Data Unit Port Disable Denial of Service Vulnerability

A vulnerability in the bridge protocol data unit BPDU forwarding functionality of Cisco Aironet Access Points APs could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless client...