Barracuda WAF Grub Password Complexity

Vulnerability Details Affected Vendor: Barracuda Affected Product: Web Application Firewall V360 Affected Version: Firmware v8.0.1.014 Platform: Embedded Linux CWE Classification: CWE-259: Use of Hard-coded Password Impact: Privileged Access Attack vector: Password Cracking 2. Vulnerability...

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based application interface of the Cisco Identity Services Engine ISE portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to...

thrivenaturals.com XSS vulnerability

Vulnerable URL: https://thrivenaturals.com/secure/form-prob.php?themecode=PROBname=1"...

pixiecrystals.com XSS vulnerability

Vulnerable URL: http://www.pixiecrystals.com/summary.php?summaryid=1"...

archive.kubatana.net XSS vulnerability

Vulnerable URL: http://archive.kubatana.net/html/archive/resour/040906emb.asp?sector=1"...

butterfieldandvallis.com XSS vulnerability

Vulnerable URL: http://www.butterfieldandvallis.com/recipes/fsindex.asp?meal=1"...

demoweb.cheleo.it XSS vulnerability

Vulnerable URL: http://demoweb.cheleo.it/takeoff/com/php/menu.php?mess=1"...

CVE-2017-6704

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...

CVE-2017-6703

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1...

CVE-2017-6704

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...

CVE-2017-6703

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1...

Design/Logic Flaw

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1...

Information disclosure

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...

CVE-2017-6703

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1...

Apache ActiveMQ Fileserver remote code execution vulnerability(CVE-2016-3088)

Author: The know Chong Yu 404 laboratory 1. Background overview ActiveMQ is an Apache Software Foundation under an open source message-driven middleware software. Jetty is an open source servlet container, it is based on Java web container such as JSP and servlet to provide the running...

Multiple XSS Vulnerabilities in PHPSHE B2C Mall System v1.5

PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. Multiple XSS vulnerabilities exist in PHPSHE B2C Mall System v1.5. An attacker can exploit this vulnerability to obtain information such as login cookies of administrative...

CVE-2017-6701

CVE-2017-6701 corresponds to a stored XSS vulnerability in the Cisco Identity Services Engine (ISE) web interface. The issue allows an unauthenticated, remote attacker to inject/script HTML in the web UI of an affected system. The root cause is insufficient sanitization of user-supplied data in t...

CVE-2017-6704

CVE-2017-6704 applies to the Cisco Prime Collaboration Provisioning Tool web application. An authenticated, remote attacker could exploit insufficient input validation to download arbitrary files from the system, reading files on the underlying filesystem. Public references in Cisco’s advisory co...

CVE-2017-6704

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...

HUMAX Gateway Backup File Download Vulnerability

Humax HG100R devices are prone to a backup file download vulnerability. This file contains sensitive information which may lead to further attacks. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...