Design/Logic Flaw

FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances, via unspecified vectors...

Relay Ajax Directory Manager Arbitrary File Upload Vulnerability

Relay Ajax Directory Manager is a set of PHP and Perl development using Web Ajax-based file directory management software . An arbitrary file upload vulnerability exists in Relay Ajax Directory Manager versions 1.5.1 and 1.5.3. An attacker can exploit this vulnerability to upload arbitrary files ...

Microsoft Windows Authenticated User Code Execution

This module uses a valid administrator username and password or password hash to execute an arbitrary payload. This module is similar to the "psexec" utility provided by SysInternals. This module is now able to clean up after itself. The service created by this tool uses a randomly chosen name an...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the dhcp3-relay package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of Tor’s software allows a remote attacker to compromise the confidentiality and integrity of protected information.

The vulnerability exists in Tor due to the handling of the chain after a client receives an incoming cell with RELAYEARLY. Exploiting this vulnerability allows malicious actors operating remotely to carry out an attack with confirmation of traffic, using the RELAY and RELAYEARLY cells as means to...

The vulnerability of the Pidgin instant messaging system allows a remote attacker to trigger a service denial.

The Pidgin software contains a vulnerability in its component designed to work with the IRC protocol. Exploiting this vulnerability allows a malicious actor to induce a service failure by sending a specially crafted message...

SAP NetWeaver AS JAVA 7.1 < 7.5 - ctcprotocol Servlet XXE

Exploit for java platform in category web applications Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 - 7.5 Vendor URL: http://SAP.com Bug: XXE Sent: 20.10.2015 Reported: 21.10.2015 Vendor response: 21.10.2015 Date of Public Advisory: 08.03.2016 Reference: SAP...

Paragon Initiative Enterprises: SMTP server allows anonymous relay from internal addresses to internal addresses

Hello, Issue descripton your incoming SMTP servers, provided by google , seems to be accepting without authentication mails from addresses @paragonie.com and destined for addresses @paragonie.com. This can greatly ease spear-phishing attacks, as users usually put much trust into emails coming fro...

Relay Ajax Directory Manager relayb01-071706 / 1.5.1 / 1.5.3 - Unauthenticated Arbitrary File Upload

Exploit for php platform in category web applications Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution A vulnerability within the Relay Ajax Directory Manager web application allows unauthenticated attackers to upload arbitrary files to the web serv...

Relay Ajax Directory Manager relayb01-071706/1.5.1/1.5.3 - Arbitrary File Upload

Advisory: Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution A vulnerability within the Relay Ajax Directory Manager web application allows unauthenticated attackers to upload arbitrary files to the web server running the web application. Details...

Relay Ajax Directory Manager 1.5.3 File Upload / Command Execution

Advisory: Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution A vulnerability within the Relay Ajax Directory Manager web application allows unauthenticated attackers to upload arbitrary files to the web server running the web application. Details...

Siemens SIPROTEC 4 and SIPROTEC Information Disclosure Vulnerability

Siemens SIPROTEC 4 is a family of multifunctional relays; SIPROTEC Compact is a microcomputer protection device in which EN100 is a multi-format encoder module. An information disclosure vulnerability exists in the integrated web server of SIPROTEC 4 and SIPROTEC Compact. A remote attacker with...

Cisco IOS and IOS XE Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 relay messages. An attacker could exploit this...

Cisco IOS Software DHCPv6 Relay Denial of Service Vulnerability (cisco-sa-20160323-dhcpv6)

A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2016-1367

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

CVE-2016-1367

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

Design/Logic Flaw

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

Cisco Adaptive Security Appliance Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCPv6 relay feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 packets. An attacker could exploit this vulnerability ...

PT-2016-4736 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 9.4.1 Description: A issue in the DHCPv6 relay implementation allows remote attackers to cause a denial of service, resulting in a device reload, via crafted DHCPv6 packets. This could be...

SAP NetWeaver Java AS XXE Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A xxe security vulnerability exists in the SAP NetWeaver Java AS version 7.4 Configuration Wizard, which can be exploited by remote attackers to cause a denial of...