Honeywell SCADA Controllers Exposed Passwords in Clear Text

A series of remotely exploitable vulnerabilities exist in a popular web-based SCADA system made by Honeywell that make it easy to expose passwords and in turn, give attackers a foothold into the vulnerable network. The flaws exist in some versions of Honeywell’s XL Web II controllers, systems...

Cisco Patches Authentication Bypass in Cisco Prime Home

Cisco has patched a critical vulnerability in its Cisco Prime Home remote management software used by service providers to oversee and provision subscribers’ home devices. The flaw, found by Cisco engineers, is in the product’s web-based GUI and allows remote attackers to bypass authentication an...

Cisco Prime Home Web-Based User Interface XML External Entity Vulnerability (cisco-sa-20160921-cph)

A vulnerability in the web-based user interface of Cisco Prime Home could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

CVE-2017-3791

A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions with administrator privileges. The vulnerability is due to a processing error in the role-based access control RBAC of URLs. An attacker could...

Cisco Prime Home Authentication Bypass Vulnerability

A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions with administrator privileges. The vulnerability is due to a processing error in the role-based access control RBAC of URLs. An attacker could...

Web Based TimeSheet Script Authentication Bypass Vulnerability

web based timesheet is a program to monitor the work of your employees. An authentication bypass vulnerability exists in the Web Based TimeSheet script that requires the string 'or' '=' to be entered where the password is filled in, which can be exploited by an attacker to bypass authentication...

Web Based TimeSheet Script SQL Injection

Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo: http://qualitypointtech.net/timesheetdemo/index.php Version: N/A Tested on: Win7 x64,...

Cross site scripting

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2016-9222

A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known...

CVE-2017-3805

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and...

CVE-2016-9222

CVE-2016-9222 affects Cisco NetFlow Generation Appliance. The vulnerability is a Cross-Site Scripting (XSS) issue in the web-based management interface caused by insufficient validation of user-supplied input. An unauthenticated, remote attacker could lure a user to click a crafted link and execu...

Web Based TimeSheet Script - Authentication Bypass

Web Based TimeSheet Script - Authentication Bypass Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo:...

Web Based TimeSheet Script - Authentication Bypass

Exploit for php platform in category web applications Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo:...

Web Based TimeSheet Script - Authentication Bypass

Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo: http://qualitypointtech.net/timesheetdemo/index.php Version: N/A Tested on: Win7 x64,...

Complain Management System SQL Injection

Title : Complain Management System SQL Injection Date: 20 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: https://sourceforge.net/projects/complain-management-system/ Version: not supplied Download Software:...

Complain Management System - SQL injection Vulnerability

Exploit for php platform in category web applications Title : Complain Management System SQL Injection Date: 20 January 2017 Exploit Author: Sibusiso Sishi email protected Tested on: Windows7 x32 Vendor: https://sourceforge.net/projects/complain-management-system/ Version: not supplied Download...

Complain Management System - SQL injection

Complain Management System - SQL injection Title : Complain Management System SQL Injection Date: 20 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: https://sourceforge.net/projects/complain-management-system/ Version: not supplied Download...

Complain Management System - SQL injection

Title : Complain Management System SQL Injection Date: 20 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: https://sourceforge.net/projects/complain-management-system/ Version: not supplied Download Software:...

Cisco IOx Software Information Disclosure Vulnerability (cisco-sa-20170118-ios)

A vulnerability in the web-based management interface of Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted...

Cisco IOS and Cisco IOx Software Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. The vulnerability is due to lack of proper input validation of the...