Code injection

The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...

CVE-2014-6064

The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...

CVE-2014-6064

McAfee Web Gateway (MWG) information disclosure (CVE-2014-6064) affects the Admin UI Accounts tab. Versions before MWG 7.3.2.9 and before 7.4.2 on the 7.4.x line are vulnerable to remote authenticated access that can reveal hashed user passwords via unspecified vectors. The connected sources conf...

CVE-2014-6064: Exposure of Sensitive Information to an Unauthorized Actor

The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...

McAfee Web Gateway Proxy Detection (Blocked Resource)

Binary data 8344.prm...

McAfee Web Gateway Proxy Detection

Binary data 8345.prm...

McAfee Web Gateway Admin Traffic Detection

Binary data 8346.prm...

Symantec Web Gateway Multiple PHP Pages Cross Site Scripting (CVE-2014-1652)

A cross-site scripting vulnerability exists in Symantec Web Gateway. Successful exploitation could result in attacker-controlled script code being executed in the browser context of the Symantec Web Gateway management console. The vulnerability is due to improper validation of "variable",...

Symantec Web Gateway 5.0.3.18 LFI Remote ROOT RCE Exploit

No description provided by source. !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI...

Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection

No description provided by source. !/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerability reported to CERT 3...

Symantec Web Gateway 5.1.0.x - Multiple Vulnerabilities

No description provided by source...

Symantec Web Gateway 5.0.3.18 (deptUploads_data.php groupid parameter) Blind SQLi

No description provided by source. !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...

Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

VTLS Web Gateway 48.1 Searchtype Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26419/info Web Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers

No description provided by source. Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012: Vulnerability reported to CERT 22 Jun 2012:...

Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change

No description provided by source. !/usr/bin/python import urllib import urllib2 import re import sys print print Symantec Web Gateway = 5.0.3.18 Arbitrary Password Change print @Kc57 print \n if lensys.argv != 4: print Usage: poc.py RHOST username newpassword exit0 ip = sys.argv1 username =...

Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit

No description provided by source. !/usr/bin/python import urllib import sys ''' print print Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit print Offensive Security - http://www.offensive-security.com print \n 06 Jun 2012: Vulnerability reported to CERT 08 Jun 2012: Response receive...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Symantec Web Gateway Cross Site Scripting

No description provided by source. Exploit Title: Symantec Web Gateway Cross Site Scripting Google Dork: N/A Date: 05/02/2012 Author: B00y@ Software Link: http://www.symantec.com/ Version: 5.0 Tested on: Windows XP Browser: IE 8.0 and Firefox 11.0 Symantec Web Gateway is susceptible to cross site...

Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...