13146 matches found
Multiple Vulnerabilities in BINOM3 Electric Power Quality Meter
BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. Cross-site scripting vulnerabilities, HTML injection vulnerabilities, security bypass vulnerabilities, and information disclosure vulnerabilities exist in BINOM3 Electric...
Oracle MySQL 'my.conf' Security Bypass Vulnerability - Windows
Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Oracle MySQL 'my.conf' Security Bypass Vulnerability - Linux
Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
KLA10877 Multiple vulnerabilities in iTunes
Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information. Below is a complete list of vulnerabilities 1. Multiple unknown...
CodeIgniter: Link sanitation bypass in xss_clean()
Hi there, While researching a website that uses your framework xssclean function to sanitize user's input in comments, I was able to bypass it and could trigger XSS payloads using javascript links in allowed tags such as anchors. This could be achieved by using the new HTML5 standard entities suc...
Moxa Active OPC Server Local Path Enumeration Vulnerability
Moxa Active OPC Server is an OPC driver software package for operating HMI or SCADA systems. A local path enumeration vulnerability exists in Moxa Active OPC Server, which allows local attackers to bypass security restrictions and elevate privileges...
IBM Security Privileged Identity Manager Virtual Appliance Security Bypass Vulnerability (CNVD-2016-08137)
IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...
Cisco IOS and IOS XE Software ZBFW Feature Security Bypass Vulnerability
Cisco IOS and IOS XE Software are operating systems developed by Cisco for its network devices.Zone-Based Firewall ZBFW is one of the policy firewall components. A security bypass vulnerability exists in the ZBFW feature in Cisco IOS and IOS XE Software, which stems from the program failing to...
IBM Spectrum Control and IBM Storage Insights Security Bypass Vulnerabilities
IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A security bypass vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker could exploit the vulnerability to edit restricted propert...
IBM Security Privileged Identity Manager Virtual Appliance Security Bypass Vulnerability
IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...
3Pixels Media Administration Page Bypass Vulnerability
3Pixels is a media software that combines technology and consulting services. A security bypass vulnerability exists in 3Pixels Media. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
Microsoft Windows Kerberos - Security Feature Bypass (MS16-101)
Microsoft Windows Kerberos - Security Feature Bypass MS16-101 Exploit Title: Kerberos Security Feature Bypass Vulnerability Kerberos to NTLM Fallback Date: 22-09-2016 Exploit Author: Nabeel Ahmed Tested on: Windows 7 Professional x32/x64 and Windows 10 x64 CVE : CVE-2016-3237 Category: Local...
Apache Tomcat Security Bypass Vulnerability (CNVD-2016-08082)
Apache Tomcat is a lightweight Web application server , it is mainly used for the development and debugging of JSP programs for small and medium-sized systems . Apache Tomcat fails to properly create log files when processing initialization scripts, allowing remote attackers to exploit the...
Microsoft Windows Kerberos - Security Feature Bypass (MS16-101)
Exploit Title: Kerberos Security Feature Bypass Vulnerability Kerberos to NTLM Fallback Date: 22-09-2016 Exploit Author: Nabeel Ahmed Tested on: Windows 7 Professional x32/x64 and Windows 10 x64 CVE : CVE-2016-3237 Category: Local Exploits & Privilege Escalation SPECIAL CONFIG: Standard Domain...
phpMyAdmin security bypass vulnerability (CNVD-2016-07933)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...
phpMyAdmin security bypass vulnerability (CNVD-2016-07932)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...
phpMyAdmin security bypass vulnerability (CNVD-2016-07928)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...
phpMyAdmin security bypass vulnerability (CNVD-2016-07929)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...
phpMyAdmin security bypass vulnerability (CNVD-2016-07930)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...
