PT-2016-4552

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue affects the web management interface of the Ruckus Wireless H500, causing a denial of service. Recommendations At the moment, there is no information about a newer...

Cisco Meeting Server Cross-Site Scripting Vulnerability (CNVD-2016-10126)

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A cross-site scripting vulnerability exists in the Web-based management interface of Cisco Meeting Server. A remote attacker can exploit...

Cross-Site Scripting in Web Interface

The Palo Alto Networks web management interface is vulnerable to a post-authentication persistent cross-site scripting condition in the monitor tab. Ref PAN-57659/95895...

Ruckus Wireless H500 Command Injection Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A command injection vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker can exploit this vulnerabili...

CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-1000216

The CVE concerns the Ruckus Wireless H500 web management interface, which is affected by an authenticated command-injection vulnerability in its web UI. According to connected CNVD data, an attacker who can authenticate can trigger arbitrary command execution, enabling potential full compromise o...

PT-2016-4553

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue concerns an authenticated command injection in the web management interface of the Ruckus Wireless H500. Recommendations At the moment, there is no information about a...

CVE-2016-1000216: Improper Neutralization of Special Elements used in an OS Command

Ruckus Wireless H500 web management interface authenticated command injection...

Cisco Firepower Management Center and FireSIGHT System Software Cross-Site Scripting Vulnerability

Cisco Firepower Management Center and FireSIGHT System Software are management center software from Cisco in the United States. A cross-site scripting vulnerability in the web-based management interface of Cisco Firepower Management Center and FireSIGHT System Software allows remote attackers to...

ObiHai ObiPhone 10321062 5-0-0-3497 - Multiple Vulnerabilities

ObiHai ObiPhone 10321062 5-0-0-3497 - Multiple Vulnerabilities ObiHai ObiPhone - Multiple Vulnerabilities ------------------------------------------ Introduction ============ Multiple vulnerabilities were discovered in the web management interface of the ObiHai ObiPhone products. The...

Skyrun TopSec Firewall cookie cid parameter command injection vulnerability

TopSec is a firewall appliance from Skyrunner. The /cgi/maincgi.cgi program in the WEB management interface of Tianrongxin firewall has a command injection vulnerability when handling the cid variable in the cookie passed from the client, which allows an attacker to execute arbitrary commands usi...

Nagios Network Analyzer 2.2.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Nagios Network Analyzer Multiple Vulnerabilities Affected versions: Nagios Network Analyzer = 2.2.0 PDF: http://www.security-assessment.com/files/documents/advisory/NagiosNetworkAnalyzerAdvisory.pdf +-----------+ |Description| +-----------+ Th...

Cisco Connected Streaming Analytics Unauthorized Access Vulnerability

Cisco Connected Streaming Analytics is a software platform for analyzing and summarizing real-time data streams from multiple sources. A security vulnerability exists in the web management interface of Cisco Connected Streaming Analytics that could be exploited by an authenticated, remote attacke...

CVE-2016-5670

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

Hardcoded credentials

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

CVE-2016-5670

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

PT-2016-6627

Name of the Vulnerable Software and Affected Versions Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040 Description The issue allows remote attackers to obtain access via the web management interface due to a hardcoded password of admin for the admin account...

CVE-2016-5670: Undefined Security Weakness

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

Cisco Meeting Server Cross-Site Scripting Vulnerability

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A cross-site scripting vulnerability exists in the Web-based management interface of Cisco Meeting Server version 1.7 to 1.9. A remote...

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...