CVE-2022-20741 Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This...

CVE-2022-20782 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to improper enforcement of administrative privilege levels for high-value...

CVE-2022-26251

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...

Cisco Secure Network Analytics 跨站脚本漏洞

Cisco Secure Network Analytics is one of the most comprehensive visibility and network traffic analysis Nta/network detection and response Ndr solutions from Cisco. A cross-site scripting vulnerability exists in versions prior to Cisco Secure Network Analytics 2.1.1, which provides continuous,...

Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit

Roxy File Manager version 1.4.5 proof of concept exploit for a PHP file upload restriction bypass vulnerability. Exploit Title: Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit Author: Adam Shebani NULLHE4D Software: Roxy File Manager Version: 1.4.5 CVE: CVE-2018-20525 Vendor...

Cisco IP Phone 跨站请求伪造漏洞

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. A cross-site request forgery vulnerability exists in Cisco IP Phone versions 6800, 7800, and 8800, which stems from a vulnerability in the web-based management interface. A remo...

HPESBNW04270 rev.2 - HPE Aruba Instant On 1930 switch, Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Instant On 1930 Switch Series - Firmware below v1.0.7.0 - see note in summary Affected Products Aruba Instant On 1930 switches firmware versions 1.0.7.0 and below when...

[SECURITY] Fedora 34 Update: gitit-0.13.0.0-5.1.fc34

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line too ls or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

[SECURITY] Fedora 35 Update: cobbler-3.2.2-9.fc35

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

[SECURITY] Fedora 34 Update: cobbler-3.2.2-11.fc34

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

The vulnerability in the web interface of the phpMyAdmin database management system allows a perpetrator to gain access to confidential information.

The vulnerability in the web interface of the phpMyAdmin database management system application relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

Buffer overflow

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload ...

CVE-2021-23851

CVE-2021-23851 affects Bosch IP cameras with a vulnerability in the recovery image web interface. A specially crafted TCP/IP packet may crash the recovery image web interface and can cause a buffer overflow that could enable remote code execution. The recovery image can only be booted with admini...

TotoLink EX300 访问控制错误漏洞

TOTOLINK EX300 is a 300 Mbps wireless N range extender from TotoLink, China, and TOTOLINK EX1200T is a Wi-Fi range extender from Gion Electronics TOTOLINK, China.An access control error vulnerability exists in TOTOLINK EX300v2 and EX1200T. The vulnerability stems from the fact that the device web...

[SECURITY] [DLA 2965-1] cacti security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2965-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler March 29, 2022 https://wiki.debian.org/LTS -...

CVE-2022-0342

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

The vulnerability of the web interface of D-Link DIR-X1860 Wi-Fi routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface of D-Link DIR-X1860 Wi-Fi routers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTTP request...

The vulnerability of the web interface configuration of TP-Link’s AC1750 Archer C20i router software allows a hacker to execute arbitrary code.

The vulnerability of the web interface configuration of TP-Link AC1750 Archer C20i software lies in the lack of measures taken to neutralize special elements used in the operating system’s processing of the XTPExternalIPv6Address parameter. Exploiting this vulnerability allows a malicious actor t...

CheckMK Raw Edition 安全漏洞

tribe29 CheckMK Raw Edition is a comprehensive and flexible IT monitoring system from tribe29, Germany. A security vulnerability exists in CheckMK Raw Edition that originates from a successful exploit that requires the use of valid credentials or a user with the administrator role to hijack a...

PT-2022-11332 · Unknown +1 · Checkmk Raw Edition +1

Name of the Vulnerable Software and Affected Versions: CheckMK Raw Edition versions 1.5.0 through 1.6.0 Description: The issue concerns a misconfiguration in the web management console of CheckMK Raw Edition, specifically with the Dokuwiki web-app that is installed by default. This misconfigurati...