1861 matches found
Phone Shop Sales Management System 1.0 Shell Upload
Exploit Title: Phone Shop Sales Management System - Arbitrary File Upload Unauthenticated Date: 20/04/21 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/10882/phone-shop-sales-managements-system.html Version: 1.0 Tested on: Windows 10 build 19041 + xampp 3.2.4...
Reddit: Broken Authendication And Session Management
Summary: Broken Authendication And Session Management On reddit.com Here I'm Using 2 Browsers 1.Chrome victim Browser 2.Firefoxattacker browser Steps To Reproduce: 1. Login your Account Chrome Browser 2. Copy Cookies 3. Paste it in firefox Browser and reload 4. you login without username and...
The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unity Connection systems allows a perpetrator to perform cross-site scripting (XSS) attacks.
The vulnerability in the web interface for managing Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unity Connection systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor...
The vulnerability in the web interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for managing Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-si...
The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unity Connection systems allows a perpetrator to perform cross-site scripting (XSS) attacks.
The vulnerability in the web interface for managing Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unity Connection systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor...
The vulnerability of the self-service portal systems for call processing in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a intruder to compromise data integrity.
The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition call management systems exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity...
The vulnerabilities of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allow a intruder to gain unauthorized access to protected information.
The vulnerability of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems is related to the leakage of information about files and directories. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...
CVE-2021-22497
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
CVE-2021-22497
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
Authentication flaw
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
CVE-2021-22497
CVE-2021-22497 affects Advanced Authentication versions prior to 6.3 SP4 . The underlying issue is an improper session management that can lead to a potential broken authentication . According to the provided metrics, the CVSS v3.1 base score is 7.2 (HIGH) with a network attack vector and low att...
CVE-2021-22497 Advanced Authentication Improper Session Management
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
NetIQ Advanced Authentication 授权问题漏洞
NetIQ Advanced Authentication is an application from NetIQ UK. It provides a move away from usernames and passwords to a more secure way to protect your sensitive information. A security vulnerability previously existed in Advanced Authentication version 6.3 SP4, which stemmed from an improper...
CVE-2021-1406
A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion...
Input validation
A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion...
CVE-2021-1406
Cisco UC Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME) have an information disclosure vulnerability where downloadable files may inappropriately contain sensitive data. An authenticated attacker with elevated privileges can exploit via a targeted command sequence...
CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability
A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remo...
The vulnerability of the SOAP API interfaces of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection—an integrated messaging system—allows a perpetrator to execute arbitrary code. The Cisco Prime License Manager (PLM) licensing management tool also exposes vulnerabilities that enable a perpetrator to perform arbitrary actions.
The vulnerability of the SOAP API interfaces of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection—an integrated messaging system—as well as the Cisco Pri...
Insecure Session Management
mediawik is vulnerable to insecure session management. The vulnerabilty exists in Special:ResetTokens function because a blocked user might accidentally share the token or might know that a token has been compromised, and yet is not able to block any potential future use of the token by an...
