Design/Logic Flaw

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in versio...

CVE-2020-7378 CRIXP OpenCRX Unverified Password Change

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in versio...

Zyxel ZyWALL ZLD 4.30 Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications ======================================================================= title: Reflected Cross-Site Scripting product: Zyxel ZyWALL: see "Vulnerable / tested version" vulnerable version: ZLD 4.30 and before fixed version: ZLD 4.31 CVE...

CVE-2018-2370

Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...

CVE-2017-16681

Cross-Site Scripting XSS vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded...

Hipchat For Mac 4.x Remote Code Execution Vulnerability

Hipchat for Mac desktop client versions prior to 4.30 suffer from a remote code execution vulnerability. Hipchat For Mac 4.x Remote Code Execution CVE-2017-14586. Product: Hipchat for Mac desktop client. Affected Hipchat for Mac desktop client product versions: 4.0 = 4.0 but less than 4.30 please...

CVE-2014-1902

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

Authentication flaw

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

CVE-2014-1902

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

CVE-2014-1902

CVE-2014-1902 covers multiple XSS vulnerabilities in Y-Cam cameras (SD range YCB003/YCK003/YCW003; S range YCB004/YCK004/YCW004; EyeBall YCEB03; Bullet VGA YCBL03/YCBLB3; Bullet HD 720 YCBLHD5; Classic YCB002/YCK002/YCW003; Original YCB001/YCW001), all affected by firmware 4.30 and earlier. The i...

CVE-2014-1900

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote...

Sony PlayStation 3 hacked with custom firmware

The PlayStation 3 has been hacked before, originally with the PSJailbreak dongle and fail0verflow, but Sony managed to fight back with Firmware 3.60 which managed to ingeniously re-secure the console. But Hackers have released a custom firmware which allows compromised consoles to log into PSN,...

ShopCartDx 4.30 - products.php Blind SQL Injection

ShopCartDx 4.30 - products.php Blind SQL Injection !/usr/bin/perl 0-Day ShopCartDx /trafficdemos/shopcartdx1/ my $MemberID = shift or my $Method = HTTP::Request-newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub...

PT-2009-6358 · Golden Ftp Server · Golden Ftp Server

Name of the Vulnerable Software and Affected Versions: Golden FTP Server versions 4.30 through 4.50 Description: The issue allows remote authenticated users to delete arbitrary files via a .. dot dot in the DELE command. This is a directory traversal vulnerability. Recommendations: For Golden FTP...

Golden FTP Server 4.30 File Deletion Vulnerability

No description provided by source. Exploit Title: Golden FTP Server File Deletion Vulnerability Date: 18.11.2009 Author: sharpe Software Link: http://www.goldenftpserver.com/download.html Version: 4.30 Free and Professional Tested on: Windows XP SP3 CVE : if exists Code :...

ShopCartDx 4.30 products.php Blind SQL Injection

!/usr/bin/perl 0-Day ShopCartDx newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./products.php?cid=-1 OR 1!=SELECT...

Scripts4Profit DXShopCart 4.30 - pid SQL Injection

Scripts4Profit DXShopCart 4.30 - pid SQL Injection source: https://www.securityfocus.com/bid/30772/info DXShopCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

Scripts4Profit DXShopCart 4.30 - 'pid' SQL Injection

source: https://www.securityfocus.com/bid/30772/info DXShopCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

buffer overflow vulnerability in Pine

Pine versions 4.21 and before contain a buffer overflow vulnerability which allows a remote user to execute arbitrary code on the local client by the sending of a special-crafted email message. The overflow occurs during the periodic "new mail" checking of an open folder. By upgrading to Pine 4.3...