PT-2018-17558

Name of the Vulnerable Software and Affected Versions Hotspot Shield affected versions not specified Description The issue concerns a web server running on Hotspot Shield with a static IP address and port 895. This web server utilizes JSONP and stores sensitive configuration information. An...

CVE-2018-6460: Exposure of Sensitive Information to an Unauthorized Actor

Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configuration. User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to /status.js with the...

CVE-2011-4767

The Site Editor aka SiteBuilder feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a...

CVE-2011-4767: Exposure of Sensitive Information to an Unauthorized Actor

The Site Editor aka SiteBuilder feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a...