76 matches found
EUVD-2013-1149
Malware in sbrugna...
EUVD-2013-6766
Malware in sbrugna...
EUVD-2013-1148
Malware in sbrugna...
EUVD-2013-6511
Malware in sbrugna...
EUVD-2013-6769
Malware in sbrugna...
The vulnerability in the software web interface for Cisco Webex Events, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center allows a perpetrator to trigger a service failure.
The vulnerability of software web interfaces for Cisco WebEx Events, Cisco WebEx Meeting Center, Cisco WebEx Support Center, and Cisco WebEx Training Center exists due to insufficient testing of UCF media files. Exploiting this vulnerability can allow attackers to cause service failures by sendin...
The vulnerability in the web interface of software for Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center allows a perpetrator to disclose protected information.
The vulnerability of the software web interfaces for Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center is related to the absence of CAPTCHA protection. Exploiting this vulnerability can allow a malicious actor to disclose protected...
Cisco Webex Centers CVE-2020-3116 Denial of Service Vulnerability
Description Cisco Webex Centers is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug IDs CSCvr16379, CSCvr16383 and CSCvr16386. Technologies Affected Cisco WebEx Event Center Cisco WebEx...
CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...
Cisco Webex Centers CVE-2019-15987 Information Disclosure Vulnerability
Description Cisco Webex Centers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug IDs CSCvq81213 and CSCvq81230. Cisco Webex Event Center, Cisco Webex...
trainingcenter.blackboard.com XSS vulnerability
Vulnerable URL: https://trainingcenter.blackboard.com/admin/devstudents.asp?misc=3:00:16+AM=%22%27%2D%2D%21%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C=Yes=1==b Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017...
Cisco WebEx Training Center Cross-Site Scripting Vulnerability
Cisco WebEx Training Center is an online training solution from Cisco. A cross-site scripting vulnerability in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via an unspecified value...
骑士CMS某新功能SQL注入
简要描述： 骑士CMS某新功能SQL注入 详细说明： http://demo.74cms.com/ 培训中心SQL注入。所以先注册一个培训中心的账号，然后去发不新课程， 课程名用：cname'/, 其他的随便填写。 然后使用用户的身份登录其申请课程： 随便填写： 提交即返回错误： 我们把其他说明改为： /,3,1, 200, concatuser,0x0a,version , 1, 1413525884 然后提交即成功。 这个时候用培训中心的账号，查看课程申请：...
CVE-2014-2199
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...
CVE-2014-2199
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...
Cisco WebEx Training Center跨站请求伪造漏洞
Bugtraq ID:64290 CVE ID:CVE-2013-6710 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center WEB接口存在一个跨站请求伪造漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco WebEx Training Center培训注册跨站脚本漏洞
Bugtraq ID:64277 CVE ID:CVE-2013-6963 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center培训中心注册页面不正确过滤用户提交的输入，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获取敏感信息或劫持用户会话。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco WebEx Training Center培训会话号信息泄漏漏洞
Bugtraq ID:64282 CVE ID:CVE-2013-6972 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center不正确泄漏服务器应答中的敏感信息给客户端，允许远程攻击者利用漏洞查看受影响页面的来源。即使主机没有允许该攻击者作为参会者，拥有合法会话号的攻击者可使用此号加入会议音频部分。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco WebEx Training Center开放重定向漏洞
Bugtraq ID:64287 CVE ID:CVE-2013-6971 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco WebEx Training Center Email验证绕过音频会议加入漏洞
Bugtraq ID:64281 CVE ID:CVE-2013-6965 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center培训中心注册页面存在安全漏洞，允许未验证远程攻击者无需要提供合法Email地址加入培训会议的音频会议。漏洞是由于注册结束之前泄漏了培训会话信息URL，攻击者可收集泄漏URL中的培训会话访问代码和密码，使用这些信息加入受限会议。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信...