b-oldal.hu Open Redirect vulnerability

Open Bug Bounty ID: OBB-562434 Description| Value ---|--- Affected Website:| b-oldal.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

b-law.pt XSS vulnerability

Open Bug Bounty ID: OBB-558049 Description| Value ---|--- Affected Website:| b-law.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I lies in the rigid encoding of registration data, which allows a intruder to gain access to the device with administrator rights.

The vulnerability of the ACTi series D, B, E, and I video surveillance camera microprogramming systems is related to the use of a pre-installed administrator account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device with administrator privileges...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I, due to lack of access control mechanisms, allows intruders to gain access to the device or cause malfunctions during maintenance.

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to alter the device’s settings by directly accessing the...

b-abo.ru XSS vulnerability

Open Bug Bounty ID: OBB-533727 Description| Value ---|--- Affected Website:| b-abo.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Procter&Gamble Oral-B App for Android Privilege Gain Vulnerability

Procter&Gamble Oral-B App for Android is an Android-based electric toothbrush management app from Procter&Gamble. A security vulnerability exists in version 5.0.0 of the Procter&Gamble Oral-B App for Android, which stems from the program's use of AES encryption with static parameters. An attacker...

CVE-2017-16740

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2017-16740: Buffer Copy without Checking Size of Input

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-5298

In the Procter & Gamble "Oral-B App" aka com.pg.oralb.oralbapp application 5.0.0 for Android, AES encryption with static parameters is used to secure the locally stored shared preferences. An attacker can gain access to locally stored user data more easily by leveraging access to the preferences...

Design/Logic Flaw

In the Procter & Gamble "Oral-B App" aka com.pg.oralb.oralbapp application 5.0.0 for Android, AES encryption with static parameters is used to secure the locally stored shared preferences. An attacker can gain access to locally stored user data more easily by leveraging access to the preferences...

CVE-2018-5298

In the Procter & Gamble "Oral-B App" aka com.pg.oralb.oralbapp application 5.0.0 for Android, AES encryption with static parameters is used to secure the locally stored shared preferences. An attacker can gain access to locally stored user data more easily by leveraging access to the preferences...

CVE-2018-5298

The CVE-2018-5298 entry concerns the Procter & Gamble Oral-B App for Android (com.pg.oralb.oralbapp) v5.0.0, where AES is used with static parameters to protect locally stored shared preferences. The underlying issue is insecure key/parameter handling, enabling an attacker who can access the pref...

CVE-2018-5298

In the Procter & Gamble "Oral-B App" aka com.pg.oralb.oralbapp application 5.0.0 for Android, AES encryption with static parameters is used to secure the locally stored shared preferences. An attacker can gain access to locally stored user data more easily by leveraging access to the preferences...

CVE-2018-5298: Inadequate Encryption Strength

In the Procter & Gamble "Oral-B App" aka com.pg.oralb.oralbapp application 5.0.0 for Android, AES encryption with static parameters is used to secure the locally stored shared preferences. An attacker can gain access to locally stored user data more easily by leveraging access to the preferences...

PT-2018-16878

Name of the Vulnerable Software and Affected Versions Oral-B App version 5.0.0 Description The issue concerns the use of AES encryption with static parameters to secure locally stored shared preferences in the Oral-B App. This could allow an attacker to more easily gain access to locally stored...

CVE-2017-3184: Missing Authentication for Critical Function

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the...

CVE-2017-3186: Weak Password Requirements

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials...

PT-2017-15699

Name of the Vulnerable Software and Affected Versions ACTi cameras including the D, B, I, and E series version A1D-500-V6.11.31-AC Description The web application in the affected cameras uses the GET method to process requests containing sensitive information, such as user account name and...

s-b-z.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-451246 Description| Value ---|--- Affected Website:| s-b-z.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

D-Link DIR-605L Model B Denial of Service Vulnerability

D-Link DIR-605L Model B is a wireless router product from AUO D-Link. A denial of service vulnerability exists in versions prior to D-Link DIR-605L Model B FW2.11betaB06hbrf. An attacker could exploit this vulnerability by sending an HTTP request with a password field with a long string in the HT...