Cisco UCS Manager RCE

Module exploits Cisco UCS Manager 2.1 1b Remote Code Execution vulnerability which allows executing commands on operating system level. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco UCS Manager RCE""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

EUVD-2021-6821

Malicious code in bioql PyPI...

PT-2024-39772

Name of the Vulnerable Software and Affected Versions The Ultimate Coming Soon & Maintenance plugin for WordPress versions up to, and including, 1.0.9 Description The issue allows authenticated attackers with Subscriber-level access and above to modify data due to a missing capability check on th...

Cisco Unified Computing System (UCS) Central Software Improper Certificate Validation (cisco-sa-ucs-invcert-eOpRvCKH)

According to its self-reported version, Cisco Unified Computing System Central Software is affected by an improper certificate validation vulnerability. An authenticated, adjacent attacker could exploit this, by sending a crafted HTTP request to the registration API, to register a rogue Cisco UCS...

Input validation

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

CVE-2021-1354

Summary: CVE-2021-1354 affects Cisco UCS Central Software. Vulnerability: Improper certificate validation in the certificate registration process, enabling an authenticated, adjacent attacker to register a rogue UCSM via a crafted HTTP request. Impact: Potential access to Cisco UCS Central Softwa...

CVE-2021-1354: Improper Certificate Validation

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

PT-2021-1918

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System Central Software affected versions not specified Description A vulnerability in the certificate registration process could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing...

Cisco UCSM 2.2 Username / Password Disclosure

Subject: Cisco UCSM username and password hashes sent via SYSLOG Impact: Information Disclosure / Privilege Elevation Vendor: Cisco Product: Cisco Unified Computing System Manager UCSM Notified: 2014.10.31 Fixed: 2015.03.06 2.23e Author: Tom Sellers tom at fadedcode.net Date: 2015.03.21...

Cisco Unified Communications Manager Unified Serviceability CSRF Vulnerability

A vulnerability in the Cisco Unified Serviceability component of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this...