CAGE Web Design | Rolf Van Gelder Security Vulnerabilities

Amazon Web Services EC2 Instance Metadata Enumeration (Windows)

The remote host appears to be an Amazon Machine Image. Nessus will attempt to use the metadata API to collect information about the...

RuggedCom RuggedOS < 3.12.1 Web UI Multiple Security Vulnerabilities

According to its self-reported version, the RuggedCom RuggedOS (ROS) Web UI is affected by multiple vulnerabilities, some of which could allow a remote attacker to gain administrative access to the...

CVE-2023-34237

SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the Parameters setting in the Notification Script functionality allows code execution with the privileges of the SABnzbd process. Exploiting the...

CVE-2023-23399

Microsoft Excel Remote Code Execution...

Malicious code in agencyportal-web (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (3f01ab5c8d151da175f79cd0379f0f4d714ddceb4075503d821ee2f05515d1cb) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

web-canape.ru Cross Site Scripting vulnerability OBB-3887022

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

D-Link D-View 8 Web Server Detection

The D-Link D-View 8 Web Server is running on the remote...

RuggedCom RuggedOS (ROS) Web-Based Admin Interface Detection

The remote device is running the RuggedCom RuggedOS (ROS) web-based administration...

WatchGuard FireboxV and XTM Fireware OS Web Detection

The web UI for a WatchGuard FireboxV or XTM running Fireware OS was detected on the remote host. Note the plugin attempts to retrieve the Fireware OS version information from the API when HTTP Basic authentication credentials are...

Trend Micro Apex One Management Web Console Detection

The web console interface for a Trend Micro Apex One Management server was detected on the remote...

Symantec Data Center Security Web Administration Interface Detection

The remote host is running a web interface for Symantec Data Center Security, an information security management...

RuggedCom RuggedOS Web-Based Admin Interface Default Credentials

The remote RuggedCom RuggedOS (ROS) device is running a web-based interface that allows login using default...

web-argitalpena.adm.ehu.es Cross Site Scripting vulnerability OBB-3888546

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

Cisco Small Business Wireless Access Point Web Detection

The web management interface for a Cisco Small Business Wireless Access Point was detected on the remote host. If credentials were supplied the version information should be available in the...

Loxone Smart Home Miniserver Web Server Version Detection

The remote device is a Loxone Smart Home Miniserver, a home automation solution. Nessus was able to extract the version from the web sever's...

Siemens SIMATIC S7-1200 PLC Web Server Detection

The remote device is running an integrated web server that is part of the software platform for managing and monitoring the SIMATIC S7-1200 Programmable Logic Controller...

Generic HTTP Directory Traversal (Web Dirs) - Active Check

Generic check for HTTP directory traversal vulnerabilities on each directory of the remote web...

web-corpora.net Cross Site Scripting vulnerability OBB-3896470

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

RSA Authentication Agent for Web for Apache Installed

RSA Authentication Agent for Web for Apache is installed on the remote...

Generic HTTP Directory Traversal (Web Root) - Active Check

Generic check for HTTP directory traversal vulnerabilities on the web root level of the remote web...

Moxa NPort Unprotected Web Console

The remote Moxa NPort Web Console is not protected by a ...

web-corpora.net Cross Site Scripting vulnerability OBB-3882566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

teler-waf subject to Bypass of Common Web Attack Threat Rule with HTML Entities Payload

Description teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. Versions prior to v0.1.1 are vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

Information Disclosure

reportico-web/reportico is vulnerable to Information Disclosure. The vulnerability is due to improper handling of user input within the execute_mode parameter of the URL, which allows attackers obtain sensitive...

teler-waf subject to Bypass of Common Web Attack Threat Rule with HTML Entities Payload

Description teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. Versions prior to v0.1.1 are vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

Web Application Scanner

This plugin provides vulnerability detections in Web applications and Web site...

CVE-2023-21716

Microsoft Word Remote Code Execution...

CKAN Web Detection

The web UI for CKAN, an open source data management system was detected on the remote...

OpenMediaVault Web Detection

The web management interface for OpenMediaVault was detected on the remote...

OpenGear Web Detection

The web management interface for an OpenGear series 7x00 appliance was detected on the remote host. It is possible to extract the firmware version and model information if login credentials are...

CVE-2022-41103

Microsoft Word Information Disclosure...

CVE-2022-41060

Microsoft Word Information Disclosure...

web-exposition.com Cross Site Scripting vulnerability OBB-3910667

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

Cisco IOS XE Software Web UI Command Injection (cisco-sa-web-cmdinj2-fOnjk2LD)

According to its self-reported version, the IOS XE is affected by command injection vulnerability. A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with administrative privileges on the underlying...

Reportico affected by Incorrect Access Control

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the...

CVE-2022-41061

Microsoft Word Remote Code Execution...

Trend Micro Mobile Security for Enterprise Web Console Detection

The web console for Trend Micro Mobile Security for Enterprise, a security solution for mobile devices, was detected on the remote...

VMware NSX For vSphere (NSX-v) Web Interface Detection

The web interface for VMware NSX for vSphere (NSX-v), also known as VMware NSX Data Center for vSphere, was detected on the remote...

Trend Micro InterScan Web Security Virtual Appliance Device Detection

The remote host is a Trend Micro InterScan Web Security Virtual Appliance (IWSVA), a web gateway for application control, exploit detection, malware scanning, and URL filtering. Nessus was able to read the OS version number by logging into the device via...

Ivanti Endpoint Manager Cloud Services Appliance web interface detection

The web portal for Ivanti Endpoint Manager Cloud Services Appliance was detected on the remote host. Note: To obtain accurate version and build information provide HTTP basic authentication...

Cisco TelePresence Video Communication Server (VCS) Web UI Detection

The login page for a Cisco TelePresence Video Communication Server (VCS) video conferencing device was detected on the remote web server. With valid HTTP credentials, it is possible to extract version information from the web user...

iniNet SpiderControl SCADA Web Server 2.02 Local Privilege Escalation

According to its self-reported version, the iniNet SpiderControl SCADA Web Server running on the remote host is version 2.02. It is, therefore, affected by a flaw due to setting insecure permissions on the installation directory and files. A local attacker can exploit this to replace files,...

web-comp-pro.ru Cross Site Scripting vulnerability OBB-3905891

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

PrestaShop Step by Step products Pack - SQL Injection

In the module “Step by Step products Pack” (ndk_steppingpack) up to 1.5.6 from NDK Design for PrestaShop, a guest can perform SQL injection in affected...

web-skills-school.com Cross Site Scripting vulnerability OBB-3905892

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-33953 WordPress Adventure Journal theme <= 1.7.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt van Andel Adventure Journal allows Stored XSS.This issue affects Adventure Journal: from n/a through...

CVE-2024-33953

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt van Andel Adventure Journal allows Stored XSS.This issue affects Adventure Journal: from n/a through...

FatPipe MPVPN Web Detection

The web UI for FatPipe MPVPN was detected on the remote...

Harbor Web Interface Detection

The web interface for Harbor was detected on the remote...

Commvault Web Console Detection

The web console for Commvault was detected on the remote...