5449 matches found
PT-2017-11800
Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-11 Description The issue concerns stored XSS when modifying user information in the route=admin path and when registering a user account in the route=register path. Recommendations For FineCMS through 2017-07-11, as a...
PT-2017-11799
Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-11 Description The issue allows remote attackers to write to arbitrary files. This can be achieved via the contents and filename parameters in a route=style action, potentially allowing the overwrite of a .php file...
PT-2017-11645
Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-07 Description The issue allows remote PHP code execution. This can be achieved by placing the code after "?php" in a route=template request, specifically in the application/core/controller/template.php file...
AWS Auditing & Hardening Tool: Zeus
Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices. It checks security settings according to the profiles the user creates and changes them to recommended settings based on the CIS AWS Benchmark source at request of the user. Identity and Access...
thebus.org XSS vulnerability
Vulnerable URL: http://www.thebus.org/Route/Routes.asp?l=1/-///'/"//--...
The vulnerability of the RPD module in the Junos operating system allows a attacker to cause an emergency shutdown or restart of the application, thereby causing a service failure.
The vulnerability of the RPD module in the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor to cause an unexpected shutdown or restart of an application, as well as trigger service failures through the active route addition...
CVE-2017-9252
andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action...
PT-2017-18808 · Andrzuk · Finecms
Name of the Vulnerable Software and Affected Versions: andrzuk/FineCMS versions prior to 2017-05-28 Description: The issue is related to a reflected XSS in the search page. This occurs via the text-search parameter to "index.php" in a "route=search" action. Recommendations: For versions prior to...
Fedora 24 : FlightGear (2017-fc10e3165a)
This updates fixes a security bug in the route manager, to prevent it from overwriting arbitrary files CVE-2017-8921 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
UBUNTU-CVE-2017-8921
In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan XML. A resource such as a malicious third-party aircraft could exploit this to damage files belonging to...
DEBIAN-CVE-2017-8921
In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan XML. A resource such as a malicious third-party aircraft could exploit this to damage files belonging to...
Multi Manage Network Route via Meterpreter Session
This module manages session routing via an existing Meterpreter session. It enables other modules to 'pivot' through a compromised host when connecting to the named NETWORK and SUBMASK. Autoadd will search a session for valid subnets from the routing table and interface list then add routes to...
How to Add a Static Route on Netscaler MAS
This article describes how to add a static route on NetScaler MAS...
verhuurgroep.nl XSS vulnerability
Vulnerable URL: http://www.verhuurgroep.nl/?route=zoeken Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check verhuurgroep.nl SSL...
PT-2017-10682
Name of the Vulnerable Software and Affected Versions Zulip server versions prior to 1.4.3 Description The issue is related to an error in the implementation of an autosubscribe feature in the check stream exists route, allowing an authenticated user to subscribe to a private stream without an...
RHEL 6 : quagga (RHSA-2017:0794)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0794 advisory. The quagga packages contain Quagga, the free network-routing software suite that manages TCP/IP based protocols. Quagga supports the BGP4,...
RedHat Update for quagga RHSA-2017:0794-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 24 Update: quagga-0.99.24.1-5.fc24
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...
