4620 matches found
CVE-2018-14784
The CVE is for NetComm NWL-25 (4G LTE Light Industrial M2M Router). Affected firmware: 2.0.29.11 and earlier. Vulnerability: cross-site scripting (CWE-79) allowing a remote attacker to run arbitrary code on the device. Documented impact: remote code execution with network access; exploitation det...
CVE-2018-14783
CVE-2018-14783 is a Cross-Site Request Forgery vulnerability in NetComm NWL-25 4G LTE Light Industrial M2M Router. AFFECTED PRODUCTS: NWL-25 with firmware 2.0.29.11 and earlier. ROOT CAUSE/IMPACT: CSRF allows an attacker to remotely change the device password, with high impact (C/H, I/H, A/H in C...
CVE-2018-14784
NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The device is vulnerable to several cross-site scripting attacks, allowing a remote attacker to run arbitrary code on the device...
unisportstore.com XSS vulnerability
Open Bug Bounty ID: OBB-660860 Description| Value ---|--- Affected Website:| unisportstore.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-16346
An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c368 the value for the smac key is copied using strcpy to the buffer at 0xa000170c. This buffer is 25 bytes large, sending anything longer will cause a buffer...
dpuk.gov.al XSS vulnerability
Open Bug Bounty ID: OBB-654298 Description| Value ---|--- Affected Website:| dpuk.gov.al Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-10628
creationtimestamp| type| source ---|---|--- 2018-07-25 11:46:59+00:00| seen| https://t.me/icscert/15...
CVE-2018-10620
creationtimestamp| type| source ---|---|--- 2018-07-25 11:46:59+00:00| seen| https://t.me/icscert/15...
THULAC Memory Corruption Vulnerability
THULAC is a Chinese lexical analysis toolkit introduced by the Natural Language Processing and Social Humanities Computing Laboratory of Tsinghua University, which supports Chinese word segmentation and lexical annotation functions. A memory corruption vulnerability exists in the libthulac.so fil...
Null pointer dereference
An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cbmodel.h...
CVE-2018-14565
An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::findbases in include/cbngramfeature.h...
CVE-2018-14563
An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new" in the TaggingLearner class in include/cbtagginglearner.h, possibly leading to memory corruption...
HP VAN SDN Controller Root Command Injection Exploit
This Metasploit module exploits a hardcoded service token or default credentials in HPE VAN SDN Controller versions 2.7.18.0503 and below to execute a payload as root. A root command injection was discovered in the uninstall action's name parameter, obviating the need to use sudo for privilege...
rentingauthority.com XSS vulnerability
Open Bug Bounty ID: OBB-636222 Description| Value ---|--- Affected Website:| rentingauthority.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Linksys WVBR0-25 Command Injection (CVE-2017-17411)
A command injection vulnerability exists in Linksys WVBR0-25. The vulnerability is due to insufficient input validation in the router's web management portal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
Threat Outbreak Alert RuleID32832: Email Messages Distributing Malicious Software on May 25, 2018
Medium Alert ID: 57964 First Published: 2018 May 25 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32832 may contain the following files: Name | Size...
Threat Outbreak Alert RuleID32843: Email Messages Distributing Malicious Software on May 25, 2018
Medium Alert ID: 57969 First Published: 2018 May 25 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32843 may contain the following files: Name | Size...
heimsbrunn.com XSS vulnerability
Open Bug Bounty ID: OBB-622265 Description| Value ---|--- Affected Website:| heimsbrunn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
gonzague.tv XSS vulnerability
Open Bug Bounty ID: OBB-621899 Description| Value ---|--- Affected Website:| gonzague.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...