2175 matches found
CVE-2016-6404
Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...
Cross site scripting
Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...
Tengen Controls Model T-920 PLC IP Segmentation Syntax Denial of Service Vulnerability
T920 is an all-in-one, industrial-grade, high-performance programmable controller from TengControl Technology. A denial of service vulnerability exists in the IP fragmentation syntax of the Tengen T-920 PLC. An attacker can test its fragmentation reorganization capability by sending a data frame...
DEBIAN-CVE-2016-5353
epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
UBUNTU-CVE-2016-5353
epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
swfstrings swf_GetBits function 't-data' denial of service vulnerability
SWFTools is a set of software tools for SWF manipulation and creation of utility authoring. swfstrings is a text parsing tool. swftools0.9.2 and previous versions of swfstrings program swfGetBits function 't-data' is empty, resulting in access to the contents of the null pointer, triggering a...
swfdump swf_GetBits function t-data denial of service vulnerability
SWFTools is a set of SWF manipulation and creation of utility authoring software tools. swfdump displays the id, name and depth of objects defined in the SWF file. It can further decompose Actionscript, extract text, and display location information objects. In swftools 0.9.2 and previous version...
ZyXEL Billion 5200W-T Router Unauthenticated Remote Command Execution Vulnerability
ZyXEL Billion 5200W-T a router manufactured by Hutchinson Technology. An unauthenticated remote command execution vulnerability exists in the ZyXEL Billion 5200W-T router. Command injection by the syslogServerAddr parameter allows an unauthenticated attacker to remotely execute arbitrary code by...
ZyXEL P660HN-T v1 Router Unauthenticated Remote Command Execution Vulnerability
The ZyXEL P660HN-T v1 is a router manufactured by Hutchinson Technology. The ZyXEL P660HN-T v1 router suffers from an unauthenticated remote command execution vulnerability. Command injection in the remotehost parameter and the presence of a default account on the device allow an unauthenticated...
myAT&T Business - BSD license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application myAT&T Business published at the 'play' market has multiple vulnerabilities...
AT&T Messages for Tablet - Certificates or keys found, ContentProvider mode not defined, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application AT&T Messages for Tablet published at the 'play' market has multiple vulnerabilities...
AT&T Global Network Client - Certificates or keys found, Customized SSL, Dynamic Code Loading vulnerabilities
HackApp vulnerability scanner discovered that application AT&T Global Network Client published at the 'play' market has multiple vulnerabilities...
AT&T YesOkay - External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application AT&T YesOkay published at the 'play' market has multiple vulnerabilities...
AT&T VoIP - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application AT&T VoIP published at the 'play' market has multiple vulnerabilities...
AT&T Connect - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application AT&T Connect published at the 'play' market has multiple vulnerabilities...
Security Bulletin: ASN. 1 coding in the presence of a heap memory corruption vulnerability-vulnerability warning-the black bar safety net
! ! 1. Security Bulletin information Title: Objective system integrated Co., Ltd. The design of the ASN. 1 coding specification in the presence of one can lead to heap memory corruption vulnerabilities. Vulnerability CVE number: CVE-2 0 1 6-5 0 8 0 Announcement of the URL address:...
F5 Networks BIG-IP : Multiple Wireshark (tshark) vulnerabilities (K01837042)
CVE-2015-8711 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...
Insider Breach: T-Mobile Czech Employee Steals and Sells 1.5 Million Users Data
T-Mobile is the latest in the list of recent high-profile data breaches, though this time the breach is not carried out by "Peace" - the Russian hacker who was behind the massive breaches in some popular social media sites including LinkedIn, MySpace, Tumblr, and VK.com. Instead, one of the...
locator.my.t-mobile.com XSS vulnerability
Vulnerable URL: http://locator.my.t-mobile.com/Store.aspx?LN=" Details: Description| Value ---|--- Patched:| Yes, at 20.06.2016 Latest check for patch:| 20.06.2016 14:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...
secure-checkout.t-mobile.com XSS vulnerability
Vulnerable URL: https://secure-checkout.t-mobile.com/webapp/wcs/stores/servlet/TMCcoOrderStatusLookupForm?langId=-1=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...