12443 matches found
CVE-2017-15035
EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service application crash...
CVE-2017-1000085
Subversion Plugin connects to a user-specified Subversion repository as part of form validation e.g. to retrieve a list of tags. This functionality improperly checked permissions, allowing any user with Item/Build permission but not Item/Configure to connect to any web server or Subversion server...
Apache Traffic Server 'HTTP/2' Multiple Unspecified Vulnerabilities
Apache Traffic Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Input validation
The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...
CVE-2015-7841: Improper Neutralization of Special Elements used in a Command
The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...
CVE-2015-7843
The CVE-2015-7843 issue affects Huawei FusionServer management interfaces where the login module does not limit the number of query attempts. This allows remote authenticated attackers to brute-force higher-privilege credentials, enabling access to higher-level user accounts. Affected products in...
CVE-2015-7843
The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...
CVE-2015-7841
Huawei FusionServer products (RH2288 V3/HW3 with FW before V100R003C00SPC603, RH2288H V3 before V100R003C00SPC503, XH628 V3 before V100R003C00SPC602, RH1288 V3 before V100R003C00SPC602, RH2288A V2 before V100R002C00SPC701, RH1288A V2 before V100R002C00SPC502, RH8100 V3 before V100R003C00SPC110, C...
PT-2017-7280
Name of the Vulnerable Software and Affected Versions Huawei FusionServer rack servers RH2288 V3 versions prior to V100R003C00SPC603 Huawei FusionServer rack servers RH2288H V3 versions prior to V100R003C00SPC503 Huawei FusionServer rack servers XH628 V3 versions prior to V100R003C00SPC602 Huawei...
Trend Micro OfficeScan Server Request Forgery Vulnerability
Trend Micro OfficeScan is a best-of-breed endpoint security solution for mid-sized and large organizations, with a future-proof, resilient architecture that allows you to customize your threat protection and data protection through plug-ins. A server request forgery vulnerability exists in Trend...
Hackers Exploiting Microsoft Servers to Mine Monero - Makes $63,000 In 3 Months
Mining cryptocurrencies can be a costly investment as it takes a monstrous amount of computing power, and thus hackers have started using malware that steals computing resources of computers it hijacks to make lots of dollars in digital currency. Security researchers at security firm ESET have...
IBM Open Admin Tool SOAP welcomeServer PHP Command Injection
Added: 09/27/2017 CVE: CVE-2017-1092 BID: 98615 Background IBM Informix Dynamic Server IDS is an online transaction processing OLTP data server for enterprise and workgroup computing. Open Admin Tool OAT is an open source, platform-independent tool providing a graphical interface for administrati...
IBM Open Admin Tool SOAP welcomeServer PHP Command Injection
Added: 09/27/2017 CVE: CVE-2017-1092 BID: 98615 Background IBM Informix Dynamic Server IDS is an online transaction processing OLTP data server for enterprise and workgroup computing. Open Admin Tool OAT is an open source, platform-independent tool providing a graphical interface for administrati...
IBM Open Admin Tool SOAP welcomeServer PHP Command Injection
Added: 09/27/2017 CVE: CVE-2017-1092 BID: 98615 Background IBM Informix Dynamic Server IDS is an online transaction processing OLTP data server for enterprise and workgroup computing. Open Admin Tool OAT is an open source, platform-independent tool providing a graphical interface for administrati...
Design/Logic Flaw
Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate...
Easy Intelligence Gathering: theHarvester
The objective of this program is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database. This tool is intended to help Penetration testers in the early stages of the penetration te...
Apache Tomcat 'HTTP PUT Request' JSP Upload Code Execution Vulnerability
Apache Tomcat is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...
Multiple Websites Mine Cryptocurrencies CPU Hijacking
A CPU hijacking vulnerability exists in multiple web servers. A remote attacker can exploit this vulnerability using one of the following miners: CoinHive, CryptoLoot, MineMyTraffic, ProjectPoi and JSECoin. Successful exploitation allows a remote attacker to use a clients CPU for currency mining...
EternalBlue Exploit Used in Retefe Banking Trojan Campaign
Criminals behind the Retefe banking Trojan have added a new component to their malware that uses the NSA exploit EternalBlue. The update makes Retefe the latest malware family to adopt the SMBv1 attack against a patched Windows vulnerability, and could signal an emerging trend, said researchers a...
