CVE-2017-0249

An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests...

CVE-2017-0255

Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability"...

Privilege escalation

Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability"...

Design/Logic Flaw

A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests...

CVE-2017-0255

Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability"...

CVE-2017-0247

The CVE affects Microsoft ASP.NET Core: a DoS vulnerability caused by improper validation of web requests in the TextEncoder.EncodeCore function. It applies to ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3, where remote attackers could trigger DoS by exploiting incorrect calculation of the...

Cisco Integrated Management Controller Arbitrary Code Execution Vulnerability

Cisco Integrated Management Controller that IMC, is the United States Cisco Cisco company a set of tools for the management of the UCS Unified Computing System, which supports HTTP, SSH access, etc., and can be on the server, shutdown and reboot operations. An arbitrary code execution vulnerabili...

NetIQ Access Manager Cross-Site Request Forgery Vulnerability

NetIQ Access Manager NAM is a set of resource access solution developed by NetIQ Inc. in the United States. It provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A cross-site request forgery vulnerability exists in NetIQ Access Manager due to...

IBM Security Identity Manager Cross-Site Request Forgery Vulnerability (CNVD-2017-04428)

IBMSecurityIdentityManager ISIM is a suite of identity management and governance solutions from IBM, USA. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password management. A cross-si...

CVE-2017-0107

Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka "Microsoft SharePoint XSS Vulnerability."...

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability (CNVD-2017-03854)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site request forgery vulnerability...

Microsoft Exchange Server Remote Privilege Elevation Vulnerability

Microsoft Exchange Server is a mail service program developed by Microsoft. An unspecified security vulnerability exists in Microsoft Exchange Outlook Web Access OWA when it fails to properly process Web requests, which could be exploited by an attacker to submit a special request for elevated...

USN-3204-1 tomcat6, tomcat7 vulnerability

It was discovered that Tomcat incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to cause Tomcat to consume resources, resulting in a denial of service...

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow information disclosure i...

MS15-041: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could...

XenForo Remote Code Execution Vulnerability

XenForo is a community forum software with a fresh interface and a powerful engine. A remote code execution vulnerability exists in XenForo versions between 1.5.x and 1.5.11a, which can be exploited by an attacker to execute arbitrary code by constructing a specific HTTP request...

IBM BigFix Remote Control Denial of Service Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A denial of service vulnerability exists in the broker application in IBM BigFix Remote Control 9.1.2 and prior versions. A remote attacker can exploit this vulnerability to cause a denial of service by...

TYPO3 'API method' Directory Traversal Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A directory traversal vulnerability exists in the TYPO3 'API method', which can be exploited by an attacker by sending a UTL request containing a directory traversal sequence '...

IBM Rational Team Concert Injection Vulnerability

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support decentralized teams for real-time collaboration related to software lifecycle management solutions. An injection vulnerability exists in IBM RTC. An attacker could exploit this vulnerability by sending a...

Acoem 01dB DUO Smart Noise Monitor Remote Password Change

!/bin/sh Acoem 01dB DUO Smart Noise Monitor Remote Password Change HW version: LIS1005G Application FW: 2.34 Metrology FW: 2.10 Modem FW: 08.01.108 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for...