258671
|
- |
|
catfish_project
|
catfish
|
Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the curren…
|
NVD-CWE-Other
|
CVE-2014-2094
|
2014-03-12 01:55 |
2014-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258672
|
- |
|
imagecms
|
imagecms
|
Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q…
|
CWE-352
Origin Validation Error
|
CVE-2013-7334
|
2014-03-12 01:30 |
2014-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258673
|
- |
|
zte
|
f460 f660
|
web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2321
|
2014-03-12 01:22 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258674
|
- |
|
zte
|
f460 f660
|
Per: http://www.kb.cert.org/vuls/id/600724
" It has been reported that the web_shell_cmd.gch script is sometimes accessible from the WAN interface making exploitation of this backdoor from the Inter…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2321
|
2014-03-12 01:22 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258675
|
- |
|
huawei
|
e355_firmware e355
|
The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, …
|
CWE-287
Improper Authentication
|
CVE-2013-6031
|
2014-03-11 23:11 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258676
|
- |
|
citrix
|
netscaler_application_delivery_controller_firmware
|
Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 b…
|
CWE-79
Cross-site Scripting
|
CVE-2013-6944
|
2014-03-11 22:48 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258677
|
- |
|
citrix
|
netscaler_application_delivery_controller_firmware
|
Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors…
|
CWE-94
Code Injection
|
CVE-2013-6943
|
2014-03-11 22:47 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258678
|
- |
|
citrix
|
netscaler_application_delivery_controller_firmware
|
Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attack…
|
CWE-352
Origin Validation Error
|
CVE-2013-6942
|
2014-03-11 22:43 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258679
|
- |
|
citrix
|
netscaler_application_delivery_controller_firmware
|
Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell vi…
|
NVD-CWE-noinfo
|
CVE-2013-6941
|
2014-03-11 22:42 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258680
|
- |
|
citrix
|
netscaler_application_delivery_controller_firmware
|
Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive infor…
|
CWE-255
Credentials Management
|
CVE-2013-6940
|
2014-03-11 22:39 |
2014-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|