5375 matches found
Code injection
The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...
CVE-2016-5383
The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...
CVE-2016-5383
The CVE-2016-5383 issue affects Red Hat CloudForms Management Engine (CFME) 4.1, where the web UI did not properly filter input in certain fields, allowing remote authenticated attackers to execute arbitrary code on the host. Root cause: insufficient input filtering (listed as “Lack of field filt...
Cisco UCS Central Software Web UI Detection
Binary data ciscoucscentralwebuidetect.nbin...
Metasploit Web UI Diagnostic Console Command Execution
This module exploits the "diagnostic console" feature in the Metasploit Web UI to obtain a reverse shell. The diagnostic console is able to be enabled or disabled by an administrator on Metasploit Pro and by an authenticated user on Metasploit Express and Metasploit Community. When enabled, the...
Unspecified Cross-Site Scripting Vulnerability in OSSEC Web UI
OSSEC's Web UI is using an open source web interface OSSEC HIDS Security. An unspecified cross-site scripting vulnerability exists in the OSSEC Web UI. An attacker may be able to exploit the vulnerability to execute arbitrary script code in a trusted user's browser at an affected site. Allowing a...
CVE-2016-3195
Cross-site scripting XSS vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-3195
CVE-2016-3195 is a client-side cross-site scripting (XSS) vulnerability affecting Fortinet FortiManager Web-UI and FortiAnalyzer Web-UI. Affected: FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6; FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6. Cause: unspecified vectors enable remot...
JVN#58455472: OSSEC Web UI vulnerable to cross-site scripting
OSSEC Web UI is a web interface for use with Open Source HIDS Security OSSEC. OSSEC Web UI contains a cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...
Actiontec T2200H Remote Reverse Root Shell
Device Details Vendor: Actiontec Telus Branded, but may work on others Model: T2200H but likely affecting other similar models of theirs Affected Firmware: T2200H-31.128L.03 Device Manual: http://static.telus.com/common/cms/files/internet/telust2200husermanual.pdf Reported: November 2015 Status:...
VMware Aria Operations for Logs Web UI Detection
Binary data vmwarevrealizeloginsightwebuidetect.nbin...
FortiManager and FortiAnalyzer Client Side XSS vulnerability
A client side XSS vulnerablity in FortiManager/FortiAnalyzer could allow malicious script being injected in the Web-UI; this potentially enables XSS attacks...
Cisco UCS Platform Emulator Web UI Detection
Binary data ciscoucspewebuidetect.nbin...
QlikView Server Web UI Detection
Binary data qlikviewserverwebuidetect.nbin...
ATCOM PBX Authentication Bypass Vulnerability
ATCOM PBX is prone to an authentication bypass vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Faraday v1.0.20 - Collaborative Penetration Test and Vulnerability Management Platform
Faraday introduces a new concept - IPE Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. A brand new Faraday version is ready! Faraday v1.0.20 Community, Pro &...
VMware Aria Operations Web UI Detection
Binary data vmwarevrealizeoperationsmanagerwebuidetect.nbin...
WatchGuard Fireware XTM < 11.10.7 Open Redirect Vulnerability
WatchGuard Fireware XMT Web UI is prone to an open redirect vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...