RapidWareX 2.0.1 - (WebUI) CSRF Exploit

No description provided by source. RapidWareX v2.0.1 WebUI CSRF Exploit Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] RapidWareX v2.0.1 WebUI is prone to a post-authentication CSRF vulnerability, which allows the...

ScreenOS 1.73/2.x Firewall Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2176/info NetScreen Firewall is a network appliance used to secure against intruders and various types of attacks to a network. NetScreen has a Web administrative Interface WebUI used to configure and set the firewall...

uTorrent WebUI 0.310 beta 2 - Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28847/info uTorrent WebUI is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions in the context of the affected application. uTorrent WebUI...

uTorrent WebUI <= 0.370 - Authorization header DoS Exploit

No description provided by source. !/usr/bin/perl Exploit Title: uTorrent WebUI Version: µTorrent 2.0 build 18488 / WebUI EAX 00000000 ECX 00000000 EDX 00000001 EBX 003D8360 ASCII "admin" ESP 0141FE94 EBP 0141FF08 ESI 00000000 EDI 01511958 EIP 0041BC62 uTorrent.0041BC62 Good luck! corelanc0d3r us...

Local File inclusion

A local file inclusion is possible by specifying full path to any desired file in the Kickstart value in Cobbler's WebUI...

Skybox Security 6.3.x 6.4.x - Multiple Information Disclosures

Skybox Security 6.3.x 6.4.x - Multiple Information Disclosures Exploit Title: SKYBOX Security – Multiple Information Disclosure Date: 22-Jan-2014 Exploit Author: Luigi Vezzoso Vendor Homepage: http://www.skyboxsecurity.com Version: Skybox View Appliances with ISO versions: 6.3.33-2.14, 6.3.31-2.1...

McAfee Cloud Single Sign On WebUI Default Credentials

The McAfee Cloud Single Sign On WebUI interface on the remote host has the 'admin' user account secured with the default password. A remote, unauthenticated attacker could exploit this to gain administrative access to the web interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

OpenMediaVault Web Detection

Binary data openmediavaultwebuidetect.nbin...

Palo Alto Networks PAN-OS Firewall/Panorama WebUI Default Credentials

The Palo Alto Networks PAN-OS Firewall / Panorama WebUI interface on the remote host has the 'admin' user account secured with the default password. An unauthenticated, remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc...

Code injection

The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service WebUI outage via crafted packets, aka Bug IDs CSCtf73188, CSCtf88059, CSCtf87951, CSCtf87908, and CSCtf88019...

Cisco VC220 Network Dome Camera and Cisco VC240 Network Bullet Camera Denial of Service Vulnerabilites

The Cisco Video Surveillance VC220 Network Dome Camera and the Cisco VC240 Network Bullet Camera contain vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected devices, preventing web user interface WebUI access to the...

PT-2013-1610

Name of the Vulnerable Software and Affected Versions Cisco VC220 and VC240 cameras affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a WebUI outage, via crafted packets. Recommendations At the moment, there is no information...

CVE-2012-3913: Undefined Security Weakness

The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service WebUI outage via crafted packets, aka Bug IDs CSCtf73188, CSCtf88059, CSCtf87951, CSCtf87908, and CSCtf88019...

Junos Space WebUI Detection

Junos Space is a network management solution used to automate management for Juniper hardware. Junos Space WebUI, the web interface for Junos Space, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66720; scriptversion"1.4";...

Cross site scripting

Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...

CVE-2013-2290

Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...

PT-2013-3638

Name of the Vulnerable Software and Affected Versions ArubaOS versions 6.1.x-AirGroup before 6.1.3.6-AirGroup ArubaOS versions 6.1.x-FIPS before 6.1.4.3-FIPS ArubaOS versions 6.1.3.x before 6.1.3.7 ArubaOS versions 6.2.x before 6.2.0.3 Description A cross-site scripting XSS issue exists in the...

CVE-2013-2290: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...

ipa security, bug fix and enhancement update

3.0.0-25.el6 - Filter generated winbind dependencies so the right version of samba can be installed. 905594 3.0.0-24.el6 - Add certmonger condrestart to server post scriptlet 903758 - Make certmonger a pre Requires 903758 - Add selinux-policy to Requirespre to avoid post scriptlet AVCs 903758 - S...

FreeBSD : chromium -- multiple vulnerabilities (ce84e136-e2f6-11e1-a8ca-00262d5ed8ee)

Google Chrome Releases reports : Linux only 125225 Medium CVE-2012-2846: Cross-process interference in renderers. Credit to Google Chrome Security Team Julien Tinnes. 127522 Low CVE-2012-2847: Missing re-prompt to user upon excessive downloads. Credit to Matt Austin of Aspect Security. 127525...