405 matches found
Design/Logic Flaw
The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...
CVE-2013-1615
The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...
CVE-2013-1615: Exposure of Sensitive Information to an Unauthorized Actor
The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...
Apache VCL improper input validation
CVE-2013-0267: Apache VCL improper input validation Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache VCL 2.1, 2.2, 2.2.1, 2.3, 2.3.1 Description: Some parts of VCL did not properly validate input data. This problem was present both in the Privileges portion of...
D-Link DNS-323 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: D-Link DNS-323 Multiple Vulnerabilities Author: sghctoma E-mail: email protected Category: Hardware Vendor: http://www.dlink.com/ Firmware Version: 1.09 Product:...
D-Link DNS-323 - Multiple Vulnerabilities
Exploit Title: D-Link DNS-323 Multiple Vulnerabilities Author: sghctoma E-mail: [email protected] Category: Hardware Vendor: http://www.dlink.com/ Firmware Version: 1.09 Product:...
D-Link DNS-323 File Upload / Traversal / Command Execution
Exploit Title: D-Link DNS-323 Multiple Vulnerabilities Author: sghctoma E-mail: [email protected] Category: Hardware Vendor: http://www.dlink.com/ Firmware Version: 1.09 Product:...
D-Link DNS-323 - Multiple Vulnerabilities
D-Link DNS-323 - Multiple Vulnerabilities Exploit Title: D-Link DNS-323 Multiple Vulnerabilities Author: sghctoma E-mail: [email protected] Category: Hardware Vendor: http://www.dlink.com/ Firmware Version: 1.09 Product:...
[SPF v0.1.7] Smartphone Pentest Framework - Support of the SMS shell pivot
The smartphone penetration testing framework, the result of a DARPA Cyber Fast Track project, aims to provide an open source toolkit that addresses the many facets of assessing the security posture of these devices. We will look at the functionality of the framework including information gatherin...
CVE-2013-0472
The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...
Design/Logic Flaw
The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...
CVE-2013-0472
The vulnerability CVE-2013-0472 affects IBM Tivoli Storage Manager Client Web GUI in TS M Client versions 6.3.x before 6.3.1.0 and 6.4.x before 6.4.0.1, enabling unauthorized access to the TSM server via the Web GUI (vector: network). IBM lists affected products/versions and provides fixes: 6.3 →...
CVE-2013-0472
The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...
CVE-2013-0472: Undefined Security Weakness
The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...
SAP Web GUI Login Brute Forcer
This module attempts to brute force SAP username and passwords through the SAP Web GUI service. Default clients can be tested without needing to set a CLIENT. Common and default user/password combinations can be tested just setting the DEFAULTCRED variable to true. The...
Western Digital ShareSpace WEB GUI Information Disclosure
The web server for the Western Digital ShareSpace device identified is affected by an information disclosure vulnerability due to an improper configuration of access rights for the configuration file 'config.xml'. An attacker can directly access the 'config.xml' file without authentication and vi...
Multiple vulnerabilities in Web GUI of UTM-1 Edge, Safe@Office and ZoneAlarm appliances
...
Sql injection
SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."...
CVE-2011-1343
CVE-2011-1343 : A SQL injection in the Web GUI of IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL via dynamic SQL parameters. Affected product is Netcool/OMNIbus (Web GUI) with vulnerability in dynamic SQL parameter handling. Impact per sources: arbitrar...