WordPress Virim Deserialization Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Virim plugin is used in one of the website social activity analysis plugin. Virim plugin 0.4 for WordPress allows unsafe deserializatio...

PT-2019-12711

Name of the Vulnerable Software and Affected Versions Virim plugin version 0.4 Description The issue allows for Insecure Deserialization via s values, t values, or c values in the graph.php file. Recommendations For Virim plugin version 0.4, consider disabling the deserialization functionality in...

PT-2019-11216

Name of the Vulnerable Software and Affected Versions: SAP Treasury and Risk Management versions 6.0 through 6.06, 6.16 through 6.18, and 8.0 SAP S4CORE versions 1.01 through 1.03 Description: The issue results from a lack of necessary authorization checks for authorization objects T DEAL DP and ...

Exploring botnets in VR

By Asaf Nadler & Lior Lahav Botnets often use domain generation algorithms DGAs to select a domain name, which bots use to establish communication channels with their command and control servers C2. Since Akamai analyzes over 2.2 trillion DNS requests per day, and detects thousands of active...

Omron CJ1W-PH41U Position Controller Detection

Binary data 755981.prm...

ABB 1SVR427056R0000 CP-T 24 20.0 Power Supply Detection

Binary data 756499.prm...

ABB 1SVR427055R2000 CP-T 48 10.0 Power Supply Detection

Binary data 756498.prm...

ABB 1SVR427054R2000 CP-T 48 5.0 Power Supply Detection

Binary data 756496.prm...

Rockwell Automation 1336 PLUS II Drv 12.0 A, 230V 1336F-A003 T Smart MCC

Binary data 754167.prm...

Rockwell Automation 1336 PLUS Drive 6.0 A, 460V 1336S-B003 T Smart MCC

Binary data 754407.prm...

Rockwell Automation 1336 PLUS II Drv 4.5 A, 230V 1336F-A001 T Smart MCC

Binary data 754159.prm...

Honeywell 2MLR-CPUH/T-CC PLC Detection

Binary data 750807.prm...

Rockwell Automation 1336 PLUS Drive 2.5 A, 460V 1336S-B001 T Smart MCC

Binary data 754404.prm...

Omron G9SX-EX041-T-RT IO Module Detection

Binary data 756244.prm...

CVE-2017-18372

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the toolstime.asp page and can be exploited through the...

Command injection

The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the advremotelog.asp page and can be exploited through the syslogServerAd...

Command injection

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the toolstime.asp page and can be exploited through the...

CVE-2017-18369

The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the advremotelog.asp page and can be exploited through the syslogServerAd...

CVE-2017-18373

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a...

CVE-2017-18373

CVE-2017-18373 affects the Billion 5200W-T TCLinux firmware (Fw $7.3.8.0 v008 130603) distributed by TrueOnline. It exposes three default accounts, including hardcoded ones (true/true and user3 with a long 0123456789-repetition password) that allow login to the web interface and enable authentica...