992 matches found
Billions of Malicious Bots Attacks Take to Cipher-Stunting to Hide
When it comes to cyberattacks, adversaries are focusing not just on advanced malware development, but also on increasing the sophistication of their evasion techniques. This is playing out lately in the form of ballooning instances of “cipher stunting” – a TLS tampering technique that helps...
CVE-2019-3489
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...
CVE-2019-3489
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...
Suspicious JavaScript Obfuscation Chunks Technique
Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Obfuscated exploits might not be detected by IDS and IPS systems, thus allowing attackers to successfully attack the target web client...
Cross-site scripting vulnerability in Microsoft Dynamics NAV 2013 R2 Web client
Cross-site scripting vulnerability in Microsoft Dynamics NAV 2013 R2 Web client Summary A cross-site scripting vulnerability exists when Microsoft Dynamics NAV 2013 R2 doesn't properly sanitize specially crafted web requests on an affected Dynamics NAV Web client. An authenticated attacker could...
Basler IP Camera Remote Detection
Detects the installed version of Basler IP Camera. This script sends an HTTP GET request and tries to ensure the presence of Basler IP Camera. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Cross-Site Scripting Flaw in Apache ActiveMQ Threatens Web Visitors
Researchers have found a cross-site scripting XSS flaw in Apache ActiveMQ that could enable a remote attacker with no privileges to launch an array of attacks against visitors to compromised websites. The vulnerability CVE-2018-8006 was disclosed today and impacts ActiveMQ versions earlier than...
Cross site scripting
Pydio version 8.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating...
CVE-2018-1999016
Pydio version 8.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating...
CVE-2018-1999016
Pydio version 8.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating...
CVE-2018-1999016
CVE-2018-1999016 affects Pydio 8.2.0 and earlier, with a Cross Site Scripting vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php (line 48) and ./core/vendor/dapphp/securimage/examples/test.mysql.static.php (lines 114, 118). An unauthenticated remote attacker could manipula...
CVE-2018-2936
Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Unspecified Vulnerability in Oracle Communications Messaging Server
Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Communications Messaging Server is one of the messaging email server components. A security vulnerability exists in the Web Client subcomponent of the...
Veeam Backup & Replication plug-in missing in vSphere HTML5 Web Client after upgrade to VMware vSphere 6.7
Challenge After installing Veeam 9.5 Update 3a and simultaneous upgrade of vSphere from 6.5 to 6.7 Veeam vSphere Web Client Plugin might stop working for vSphere HTML5 Web Client. However it is still operational in vSphere Flash/Flex Web Client. The issue is only reproducible in case the plugin w...
Mirasys DVMS Workstation Gateway Path Traversal Vulnerability
Mirasys DVMS Worlstation is a surveillance video management system from the Finnish company Mirasys, of which Gateway is a gateway. A path traversal vulnerability exists in Mirasys DVMS Workstation 5.12.6 and earlier versions of Gateway. A remote attacker can use the Web Client webserver to...
Mirasys DVMS Workstation 5.12.6 Path Traversal
Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6...
Mirasys DVMS Workstation 5.12.6 - Path Traversal
Mirasys DVMS Workstation 5.12.6 - Path Traversal Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6...
Mirasys DVMS Workstation 5.12.6 - Path Traversal Vulnerability
Exploit for windows platform in category web applications Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 0day.today 2018-06-20...
