2869 matches found
F5 BIG-IP Web Management Interface Version
An F5 BIG-IP web management interface is running on this port, and Nessus has determined its software version. Note. HTTP credentials are required to retrieve version information. TRUSTED...
NetScaler Web Management Interface IP Address Cookie Information Disclosure
It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. %NASLMINLEVEL 70300 netscalerwebcookieinfo.nasl GPLv2 History: 1.00, 11/21/07 - Initial...
project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ project alumni = 1.0.9 Remote XSS / SQL Injection Vulnerability ================================================================ project-alumni sql injection & xss author :...
Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Advisory ID: cisco-sa-20071017-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20071017-fwsm.shtml Revision 1.0 For Public Release 2007 October 17 1600 UTC GMT...
3Com WIFI router remote administration vulnerability.
3Com 3CRWER100-75 is a wireless cable/DSL router widely used here, in israel. The router has a web management interface in it's port 80 available from inside the network. When the administrator assign a virtual server to port 80 In the management web filled under the firewall tab and the line is...
RE: XSS vulnerability in Cisco MeetingPlace
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Response: Cisco Unified MeetingPlace XSS Vulnerability ======================== http://www.cisco.com/warp/public/707/cisco-sr-20070808-mp.shtml Revision 1.0 ============ For Public Release 2007 August 08 1600 UTC GMT Cisco Response...
JVN#25471539 Aruba Mobility Controller Series cross-site scripting vulnerability
Aruba Mobility Controller series, switch products from Aruba Networks, contain a cross-site scripting vulnerability in the login page of the web management interface. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the patch Users of the products should apply...
Packeteer Web Management Interface Version Detection
Nessus was able to determine the software version of the Packeteer web management interface running on the remote host. nnposter GPL Changes by Tenable: - Revised plugin title 3/30/2009 include"compat.inc"; if description scriptid25569; scriptversion "1.9"; scriptnameenglish:"Packeteer Web...
W3M浏览器InputAnswer格式串漏洞
W3M是一款开放源代码的文字式网页浏览器。 W3M不正确过滤用户提交给格式打印函数的输入，远程攻击者可以利用漏洞进行格式串攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供。 W3M W3M 0.5.1 W3M W3M 0.3.2 .2 W3M W3M 0.3.2 .1 W3M W3M 0.3.2 W3M W3M 0.3.1 + RedHat Linux 8.0 i386 + RedHat Linux 8.0 W3M W3M 0.3 + RedHat Linux 7.3 i386 + RedHat Linux 7.3 W3M W3M 0.2.5 .1 W3M W3M 0.2.5...
SOL7397 - Download of local FirePass files using the URL in Webtop or the Admin UI
A vulnerability exists that allows an authenticated FirePass user to download files from the filesystem of a FirePass controller. In order to download a file, the user must first log in to the FirePass controller webtop or the Admin UI, and type a specially crafted URL into their web browser. Thi...
Aruba Mobility Controller vulnerable to privilege escalation
Overview The Aruba Mobility Controller Management Interface contains a privilege escalation vulnerability. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Aruba Mobility Controllers are used to process and control network traffic in...
Symantec Web Security多个拒绝服务和跨站脚本漏洞
Symantec Web Security安全产品不正确检查嵌入在HTML标记中，包含错误或者阻止页消息的返回给客户端的URL。 攻击者可以嵌入恶意命令到部分URL，客户端浏览器将执行恶意命令。目前没有详细漏洞细节提供。 Symantec Web Security 3.0.1 build 3.01.68 Symantec Web Security 3.0.1 build 3.01.67 Symantec Web Security 3.0.1 build 3.01.63 Symantec Web Security 3.0.1 build 3.01.62 Symantec Web...
Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ========================================================== Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit ========================================================== // kav 6.0 0day local priv escalation exploit // by m4d //...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
No description provided by source. ===========================================================br / Yee7TeaMbr / br / WwW.Yee7.CoMbr / ===========================================================br / br / Software: Phorum v3.2.11br / br / Vendor: http://www.phorum.org/br / br / Download:...
New Bug MiniBB Forum <= 2 Remote File Include (index.php)
Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...
TIBCO Rendezvous <= 7.4.11 (add router) Remote BOF Exploit
Exploit for unknown platform in category remote exploits ========================================================== TIBCO Rendezvous = 7.4.11 add router Remote BOF Exploit ========================================================== / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win...
CVE-2006-3410
Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks...
Somechess v1.5 rc1 - XSS
Somechess v1.5 rc1 Homepage: http://www.astrodogpress.org/chess/ Affected files: Profile input boxes ----------------------- Upon dumping the sql data into the table if you get errors and it wont create the tables & data like it did to me, then just remove all the " from the sql file. You'll also...
[MajorSecurity #10]i.List <= 1.5 - XSS
MajorSecurity 10i.List = 1.5 - XSS ---------------------------------------- Software: i.List Version: =1.5 Type: XSS Date: June, 8th 2006 Vendor: Skoom Page: http://skoom.de Credits: ------------------------------- David 'Aesthetico' Vieira-Kurz http://www.majorsecurity.de Affected Products:...
Creative Software UK Community Portal 1.1 - 'EventView.php?event_id' SQL Injection
source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...