4620 matches found
Netis E1+ 1.2.32533 Hardcoded Backdoor Account
Exploit Title: Netis E1+ 1.2.32533 - Backdoor Account root Date: 2020-04-25 Author: Besim ALTINOK Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Suppory/downloads/dd/1/img/204 Version: V1.2.32533 Tested on: Netis E1+ V1.2.32533 Credit: İsmail BOZKURT...
rfsupplier.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1150401 Security Researcher atmon3r Helped patch 228 vulnerabilities Received 5 Coordinated Disclosure badges Received 14 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting rfsupplier.com website and...
ivideo.com.tw Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1150366 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting ivideo.com.tw website and i...
Hacker returns $25 million after their IP address is exposed
By Sudais Asif In a shocking twist of events, the entire sum has been returned back by the hacker. Here's what happened and how. This is a post from HackRead.com Read the original post: Hacker returns $25 million after their IP address is exposed...
Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM SPSS Statistics Server (CVE-2017-10356, CVE-2017-10388)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6, 7.0, 7.1, and 8.0 used by IBM SPSS Statistics Desktop and Server Version 22, 23, 24, and 25. These issues were disclosed as part of the IBM Java SDK updates in Oct 2017. Vulnerability Details CVEID:...
ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c...
agenziarossi.com Cross Site Scripting vulnerability
Security Researcher Implosion Helped patch 1639 vulnerabilities Received 7 Coordinated Disclosure badges Received 29 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting agenziarossi.com website and its users. Following...
CVE-2019-19127
creationtimestamp| type| source ---|---|--- 2020-03-25 17:51:02+00:00| seen| https://t.me/cibsecurity/10730...
video.sportnk.ru Cross Site Scripting vulnerability
Security Researcher DakkarKey Helped patch 407 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting video.sportnk.ru website and its users. Following...
stjohannes-troisdorf.de Cross Site Scripting vulnerability
Security Researcher Gh05tPT Helped patch 6844 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting stjohannes-troisdorf.de website and its users. Following...
sonographersmedical.com Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3596 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting sonographersmedical.com website and its users. Following...
invitation-fx.com Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3661 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting invitation-fx.com website and its users. Following...
CVE-2020-7982
OpenWrt/OpenWrt-derived builds are affected by CVE-2020-7982. A bug in the opkg package manager fork (before 2020-01-25) misparses embedded checksums in the signed repository index, enabling a man-in-the-middle attacker to inject arbitrary package payloads that are installed without verification....
Unspecified Vulnerability in XIAOMI AI speaker MDZ-25-DT
Xiaomi AI speaker MDZ-25-DT is a smart speaker device from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in XIAOMI AI speaker MDZ-25-DT version 1.34.36 and 1.40.14. An attacker can exploit this vulnerability by sending a UART interface to obtain a root shell, read the...
CVE-2020-8994
An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSID or password, read the dialogue text files between users and XIAOMI AI speaker, use Text-To-Speech tools pretend XIAOMI...
CVE-2020-8994
The CVE-2020-8994 entry concerns Xiaomi AI Speaker MDZ-25-DT (firmware versions 1.34.36 and 1.40.14). A physical-access flaw allows an attacker to obtain a root shell by interfacing with UART, enabling reading of the Wi‑Fi SSID/password and dialogue text files, and using Text‑To‑Speech to imperso...
February 25, 2020-KB4537479 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803
None None...
CVE-2013-5594
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding...
en.owayo.com Cross Site Scripting vulnerability
Security Researcher MrRain1996 Helped patch 907 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting en.owayo.com website and its users. Following coordinated...
