Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Java Web Console...

CVE-2014-0390

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Java Web Console...

CVE-2014-0390

CVE-2014-0390 is an unspecified vulnerability in Oracle Solaris 10 affecting the Java Web Console component. The Solaris 10 (x86) plugin notes that the vulnerability allows unauthenticated network attacks via HTTP, potentially leading to unauthorized updates/inserts/deletes of Solaris data. The S...

Beetel TC1-450 Airtel Cross Site Request Forgery

Exploit Title: Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities Date: 12/13/2013 Author: SaMaN @samanL33T Vendor Homepage:http://www.beetel.in/node/10139 Category: Hardware/Wireless Router Firmware Version: TM4-0Q-020 and below Tested on: Beetel 450-TC1 Wireless Router Patch/...

WBR-3406 Wireless Broadband NAT Router Web-Console - Password Change Bypass & CSRF Vulnerability

Exploit for hardware platform in category web applications ----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things: 1. Cross Site Request Forgery For more...

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass Cross-Site Request Forgery

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass Cross-Site Request Forgery ----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things...

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass / Cross-Site Request Forgery

----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things: 1. Cross Site Request Forgery For more information, just google it. 2. This code change to new passwo...

CVE-2013-5839

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Oracle Java Web Console...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Oracle Java Web Console...

CVE-2013-5839

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Oracle Java Web Console...

CVE-2013-5839

CVE-2013-5839 affects Oracle Solaris 10, with the vulnerability in the Oracle Java Web Console component. Affected product/version details found in connected documents indicate Solaris 10 (x86 sparc variants) and specifically the Oracle Java Web Console subcomponent; the underlying root cause and...

CVE-2013-4066

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...

Design/Logic Flaw

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network...

CVE-2013-4025

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain...

CVE-2013-4024

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network...

CVE-2013-4025

CVE-2013-4025 affects IBM Data Studio Web Console (3.x before 3.2), Optim Performance Manager (5.x before 5.2), InfoSphere Optim Configuration Manager (2.x before 2.2), and DB2 Recovery Expert (2.x). The root cause is lack of an off autocomplete attribute on the login-password field, enabling an ...

activemq: Unauthenticated access to web console

The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...

[Secunia CSI 7.0] Next generation Patch Management Tool

Cybercrime costs organizations millions of dollars and to protect business from the consequences of security breaches, vulnerability intelligence and patch management are basic necessities in the toolbox of any IT team, as emphasized by organizations like the SANS Institute and the National...

Secunia CSI 7.0 - Next generation Patch Management tool released

Cybercrime costs organizations millions of dollars and to protect business from the consequences of security breaches, vulnerability intelligence and patch management are basic necessities in the toolbox of any IT team, as emphasized by organizations like the SANS Institute and the National...

Secunia CSI 7.0 - Next generation Patch Management tool released

Cybercrime costs organizations millions of dollars and to protect business from the consequences of security breaches, vulnerability intelligence and patch management are basic necessities in the toolbox of any IT team, as emphasized by organizations like the SANS Institute and the National...