492 matches found
Fake COVID-19 test result email drops King Engine ransomware
By Deeba Ahmed “King Engine” ransomware is a variant of Hentai OniChan ransomware which, after infecting a system, asking for a ridiculous 50 BTC as ransom. This is a post from HackRead.com Read the original post: Fake COVID-19 test result email drops King Engine ransomware...
Tiki Authentication Bypass Vulnerability
Tiki is a suite of open source content management and portal applications from the Tiki community that can be used to create web applications, portals, corporate intranets, extranets, and more. An authentication bypass vulnerability exists in versions prior to Tiki 21.2, which stems from Tiki...
CVE-2020-24565
creationtimestamp| type| source ---|---|--- 2020-09-29 07:50:22+00:00| seen| https://t.me/cibsecurity/14927...
Guangzhou Suoai Digital Technology Co., Ltd Suoai Smart Payment Speaker E-50 has a logic flaw vulnerability
The Sony Ericsson Group is a high-tech conglomerate that specializes in Bluetooth headphones, LCD TVs, smart audio, Bluetooth stereos, Karaoke entertainment devices, cell phones, amplifiers and other verticals based on multimedia series products. Guangzhou Suoai Digital Technology Co. Suoai Smart...
Maipu MP1800X-50 Information Disclosure Vulnerability
The Maipu MP1800X-50 is an enterprise-class multi-service router from Maipu Technology Maipu, China. A security vulnerability exists in the web interface of the Maipu MP1800X-50 version 7.5.3.14. The vulnerability can be exploited by a remote attacker to obtain sensitive information system ID,...
CVE-2020-13896
The web interface of Maipu MP1800X-50 7.5.3.14R devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime...
CVE-2020-13896
The web interface of Maipu MP1800X-50 7.5.3.14R devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime...
CVE-2020-13896
The web interface of Maipu MP1800X-50 7.5.3.14R devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime...
CVE-2020-13896
The CVE-2020-13896 entry documents an information-disclosure vulnerability in Maipu MP1800X-50 devices (firmware 7.5.3.14(R)) where the web interface exposes sensitive data via form/formDeviceVerGet. Connected sources (CNVD-2021-39048, CNVD-2019-02748) describe an information-disclosure flaw in t...
CVE-2020-13896
The web interface of Maipu MP1800X-50 7.5.3.14® devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime...
74-50-97-2.static.hvvc.us Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180000 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
SAE IT-systems FW-50 Remote Telemetry Unit Path Traversal Vulnerability
The SAE IT-systems FW-50 Remote Telemetry Unit is a remote terminal unit RTU from SAE IT-systems, Germany. A path traversal vulnerability exists in the SAE IT-systems FW-50 Remote Telemetry Unit. An attacker can exploit this vulnerability with a specially crafted request to view the file structur...
CVE-2020-10630
SAE IT-systems FW-50 Remote Telemetry Unit RTU. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users...
CVE-2020-10634
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
Design/Logic Flaw
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
CVE-2020-10634
CVE-2020-10634 affects the SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The vulnerability is a Path Traversal (IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY) that could allow a remote attacker to view the device file structure and access restricted files through a specially cra...
CVE-2020-10634
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
CVE-2020-10630
The CVE-2020-10630 entry concerns the SAE IT-systems FW-50 Remote Telemetry Unit (RTU). Technical details from connected sources specify an improper neutralization of input during web page generation (Cross-Site Scripting) in FW-50 RTU, affecting the web server component. Related materials also i...
CVE-2020-10630
SAE IT-systems FW-50 Remote Telemetry Unit RTU. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users...
SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: SAE IT-systems Equipment: FW-50 Remote Telemetry Unit RTU Vulnerabilities: Cross-site Scripting, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow an...