Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability

A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplie...

PT-2019-3517

Name of the Vulnerable Software and Affected Versions Cisco Small Business series 250, 350, 350X, 550X affected versions not specified Cisco FindIT Network Probe affected versions not specified Description The issue is related to a hardcoded X.509 certificate public/private key pair in the softwa...

Accounts Accounting 7.02 Cross Site Scripting

Exploit Title: Express Accounts Accounting 7.02 - Persistent Cross-Site Scripting Exploit Author: Debashis Pal Date: 2019-10-16 Vendor Homepage: https://www.nchsoftware.com Source: https://www.nchsoftware.com/accounting/index.html Version: Express Accounts Accounting v7.02 CVE : N/A Tested on:...

Cisco SPA100 Series Analog Telephone Adapters CVE-2019-15257 Information Disclosure Vulnerability

Description Cisco SPA100 Series Analog Telephone Adapters are prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq50523. Technologies Affected...

Cisco Small Business Smart and Managed Switches CVE-2019-12718 Cross Site Scripting Vulnerability

Description Cisco Small Business Smart and Managed Switches are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Accounts Accounting 7.02 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Express Accounts Accounting 7.02 - Persistent Cross-Site Scripting Exploit Author: Debashis Pal Vendor Homepage: https://www.nchsoftware.com Source: https://www.nchsoftware.com/accounting/index.html Version: Express Accounts...

PT-2019-3800

Name of the Vulnerable Software and Affected Versions Cisco Small Business Smart and Managed Switches affected versions not specified Description The issue is related to a cross-site scripting XSS attack in the web-based interface, caused by insufficient validation of user-supplied input. An...

PT-2019-3509

Name of the Vulnerable Software and Affected Versions Cisco Small Business series 250, 350, 350X, 550X affected versions not specified Description The issue is related to the presence of empty password hashes for the root and user accounts in the /etc/passwd file of the Cisco Small Business serie...

Accounts Accounting 7.02 - Persistent Cross-Site Scripting

Accounts Accounting 7.02 - Persistent Cross-Site Scripting Exploit Title: Express Accounts Accounting 7.02 - Persistent Cross-Site Scripting Exploit Author: Debashis Pal Date: 2019-10-16 Vendor Homepage: https://www.nchsoftware.com Source: https://www.nchsoftware.com/accounting/index.html Version...

CVE-2019-12636: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the...

PT-2019-3592

Name of the Vulnerable Software and Affected Versions Cisco Small Business Switches versions affected versions not specified Description The issue is related to a lack of protection against cross-site request forgery CSRF attacks in the web-based management interface. This could allow a remote...

CVE-2019-12718: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplie...

Accounts Accounting 7.02 - Persistent Cross-Site Scripting

Exploit Title: Express Accounts Accounting 7.02 - Persistent Cross-Site Scripting Exploit Author: Debashis Pal Date: 2019-10-16 Vendor Homepage: https://www.nchsoftware.com Source: https://www.nchsoftware.com/accounting/index.html Version: Express Accounts Accounting v7.02 CVE : N/A Tested on:...

ACSC Releases Small Business Cybersecurity Guide

The Australian Cyber Security Centre ACSC has released a cybersecurity guide for small businesses. The guide provides checklists to help small businesses protect themselves against common cybersecurity incidents. The Cybersecurity and Infrastructure Security Agency CISA encourages small business...

openSUSE: Security Advisory for curl (openSUSE-SU-2019:2169-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cisco Extends Patch for IPv6 DoS Vulnerability

Cisco has extended its patch for a high-severity IPv6 denial-of-service DoS vulnerability that was first addressed in 2016. The bug CVE-2016-1409 is a vulnerability in the IPv6 packet processing functions of multiple Cisco products, which could allow an unauthenticated, remote attacker to cause a...

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 allows a hacker to access unencrypted user accounts on the vulnerable device.

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely access unencrypted user accounts o...

The vulnerabilities of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 allow attackers to enhance their privileges.

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 is related to the use of strictly encrypted passwords for user roles such as root, debug-admin, cisco, admin, and guest. Exploiting this vulnerability allow...

PT-2019-3130

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, and RV340 affected versions not specified Description The issue is related to the use of hardcoded password hashes for users root, debug-admin, cisco, admin, and guest. This could allow a remote attacker to...

PT-2019-3129

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160 affected versions not specified Cisco Small Business RV260 affected versions not specified Cisco Small Business RV340 affected versions not specified Description The issue is related to a lack of protection for...