Oracle PeopleSoft Enterprise PeopleTools Unauthorized Operation Vulnerability (CNVD-2017-28379)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Multiple Cross-Site Request Forgery Vulnerabilities in D-Link DVG-5402SP VoIP Router

The D-Link DVG-5402SP VoIP is a wireless router product from AUO D-Link. The D-Link DVG-5402SP VoIP router suffers from multiple cross-site request forgery vulnerabilities that can be exploited by remote attackers to perform unauthorized operations...

IBM InfoSphere Master Data Management Cross-Site Request Forgery Vulnerability (CNVD-2017-21238)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

NetComm Wireless 4GT101W Router Cross-Site Request Forgery Vulnerability

NetComm Wireless 4GT101W routers is a wireless router product from NetComm Wireless Australia. A cross-site request forgery vulnerability exists in NetComm Wireless 4GT101W routers running hardware version 0.01/software version V1.1.8.8/bootloader version 1.1.3. A remote attacker could exploit th...

Brother Industries MFC-J960DWN Cross-Site Request Forgery Vulnerability

The Brother Industries MFC-J960DWN is a printer from Brother Industries in Japan. A cross-site request forgery vulnerability exists in the Brother Industries MFC-J960DWN using firmware version D and earlier. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-08705)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.2.18 and earlier. A remote attacker can exploit this vulnerability to perform unauthoriz...

Lenovo Service Bridge Cross-Site Request Forgery Vulnerability

Lenovo Service Bridge is a Windows program from the Chinese company Lenovo Lenovo that automatically detects the serial number and model number of your device. A cross-site request forgery vulnerability exists in versions prior to Lenovo Service Bridge 4. A remote attacker could exploit this...

Multiple Marel Products Security Bypass Vulnerabilities

The Marel SensorX25 X-ray Machine and other products from Marel Iceland are used in the medical industry to provide a wide range of medical tests. A security bypass vulnerability exists in a number of Marel products and stems from the program's use of hard-coded certificates. A remote attacker...

Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03388)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.1.18. A remote attacker can exploit this vulnerability to perform unauthorized operation...

HPE Version Control Repository Manager Cross-Site Request Forgery Vulnerability

HPE Version Control Repository Manager VCRM is a repository for storing software and firmware that supports ProLiant servers from HewlettPackardEnterprise HPE, USA. A cross-site request forgery vulnerability exists in HPE Version Control Repository Manager VCRM versions prior to 7.6. A remote...

THC-Hydra 8.2 - Network Logon Cracker

A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...

HELP NetCommWireless HSPA 3G10WVE Security Bypass Vulnerability

HELP NetCommWireless HSPA 3G10WVE is a wireless router product from HELP UAE. The HELP NetCommWireless HSPA 3G10WVE suffers from an authentication bypass vulnerability that allows remote attackers to submit a special request for unauthorized access to the device...

TestLink Cross-Site Request Forgery Vulnerability

Testlink is TestLink team developed a PHP-based open source test management tool . The tool provides test requirements management , test case management and test data statistics and other functions . TestLink version 1.9.14 cross-site request forgery vulnerability exists. Remote attackers can...

Alcatel-Lucent Home Device Manager Unauthorized Access Vulnerability

Alcatel-Lucent Home Device Manager is a device manager that allows you to manage and control your home network devices through a help desk. A security vulnerability exists in Alcatel-Lucent Home Device Manager that could be exploited by remote attackers to conduct spoofing attacks and perform...

EasyIO EasyIO-30P-SF Controller Hardcoding Vulnerability

The EasyIO EasyIO-30P-SF is a 32-bit controller for DDC Direct Digital Control systems. The EasyIO EasyIO-30P-SF controller uses hard-coded passwords that allow remote attackers to exploit vulnerabilities for unauthorized access...

[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04774019 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04774019 Version: 1 HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple...

Siemens SIMATIC S7-1200 CPU Device Cross-Site Request Forgery Vulnerability

The Siemens SIMATIC S7-1200 CPU device is a small programmable controller from Siemens, Germany, that meets the needs of small and medium-sized automation systems. A cross-site request forgery vulnerability exists in the web server of Siemens SIMATIC S7-1200 CPU devices using firmware versions...

The vulnerability of Cisco Nexus 1000V microprogramming software allows a remote attacker to gain unauthorized access to the device.

The function for receiving messages in the ntpproto.c file continues to operate even after an error message is displayed. This allows a remote attacker to gain unauthorized access to the device using specially crafted packets...

EFM Networks ipTIME Cross-Site Request Forgery Vulnerability

EFM Networks ipTIME is the ipTIME series of routers, access points WiFi, modems and firewalls from EFM Networks in Korea. Cross-site request forgery vulnerabilities exist in EFM Networks ipTIME n104r3 version. A remote attacker could exploit these vulnerabilities to perform unauthorized operation...

[security bulletin] HPSBGN03343 rev.1 - HP WebInspect, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04695307 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04695307 Version: 1 HPSBGN03343 rev....