932 matches found
LogonTracer Operating System Command Injection Vulnerability
LogonTracer is a visual Windows log analysis tool that checks for malicious logins by analyzing Windows Active Directory event logs. An operating system command injection vulnerability exists in LogonTracer version 1.2.0 and prior versions, which can be exploited by a remote attacker to execute...
LogonTracer Cross-Site Scripting Vulnerability
LogonTracer is a visual Windows log analysis tool that checks for malicious logins by analyzing Windows Active Directory event logs. A cross-site scripting vulnerability exists in LogonTracer version 1.2.0 and earlier versions, which can be exploited by remote attackers to execute arbitrary scrip...
CVE-2018-16168
LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors...
Apache Tomcat JK (mod_jk) Connector Directory Traversal Vulnerability
Apache Tomcat JK modjk Connector is a U.S. Apache Apache Software Foundation Apache for Apache or IIS to provide a connection to the backend Tomcat module , which supports clustering and load balancing and so on. A directory traversal vulnerability exists in Apache Tomcat JK modjk Connector...
Pagekit Bixie Portfolio plugin cross-site scripting vulnerability
Pagekit is a modular, lightweight CMS Content Management System.Bixie Portfolio plugin is used in one of the portfolio plugins. A cross-site scripting vulnerability exists in version 1.2.0 of the Pagekit Bixie Portfolio plugin. A remote attacker can exploit this vulnerability to inject arbitrary...
Eltex ESP-200 Authentication Bypass Vulnerability
Eltex ESP-200 is a wireless router product. A security vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. A remote attacker can exploit the vulnerability to log in unauthenticated with the help of default credentials...
Default credentials
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15357
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15357
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15356
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0...
Default configuration
An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15356
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15357
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...
PT-2018-12991 · Eltex · Eltex Esp-200 +1
Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 firmware version 1.2.0 Description: An authenticated attacker with low privileges can extract password hash information for all users. Recommendations: For Eltex ESP-200 firmware version 1.2.0, update to a newer version that...
PT-2018-12990 · Eltex · Eltex Esp-200 +1
Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 version 1.2.0 Description: The issue allows an authenticated attacker to execute arbitrary code through command ejection. Recommendations: For Eltex ESP-200 version 1.2.0, at the moment, there is no information about a newer...
PT-2018-12992 · Eltex · Eltex Esp-200 +1
Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 firmware version 1.2.0 Description: The issue allows an authenticated attacker with low privileges to activate a high-privileged user, potentially expanding the attack surface. Recommendations: For Eltex ESP-200 firmware version...
PT-2018-12995 · Eltex · Eltex Esp-200 +1
Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 firmware version 1.2.0 Description: The issue allows an attacker without authentication to login with default credentials for privileged users. Recommendations: For Eltex ESP-200 firmware version 1.2.0, change the default...
mstdlib Access Privilege Gain Vulnerability
mstdlib is a C library for providing general-purpose functionality. A security vulnerability exists in mstdlib version 1.2.0, which arises from a program that fails to perform proper access control on a file. An attacker can exploit the vulnerability to create files and gain access to data...
Gleez CMS Cross-Site Request Forgery Vulnerability
Gleez CMS is an extensible open source content management system CMS based on the Kohana framework. A cross-site request forgery vulnerability exists in Gleez CMS version 1.2.0. A remote attacker can exploit this vulnerability to create new pages and logs...