CVE-2015-7276

CVE-2015-7276 : Affected devices are Technicolor C2000T and C2100T that use hard-coded cryptographic keys. Root cause is hard-coded keys embedded in the devices, which can enable impersonation or man-in-the-middle via captured credentials or certificates. CVSS metrics indicate unauthenticated net...

Optergy Proton and Enterprise BMS Command Injection using a backdoor

This module exploits an undocumented backdoor vulnerability in the Optergy Proton and Enterprise Building Management System BMS applications. Versions 2.0.3a and below are vulnerable. Attackers can exploit this issue by directly navigating to an undocumented backdoor script called Console.jsp in...

CVE-2019-7276

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...

CVE-2019-7276

Optergy Proton/Enterprise BMS is affected by CVE-2019-7276: unauthenticated remote code execution via a backdoor console. Public details show an undocumented backdoor script (Console.jsp) in the tools directory that enables full root access on vulnerable versions (notably 2.0.3a and earlier). Exp...

SSL / TLS Certificate Known Hard Coded Private Keys

The remote host is running a service that is using a publicly known SSL / TLS private key. An attacker may use this key to decrypt intercepted traffic between users and the device. A remote attacker can also perform a man-in-the-middle attack in order to gain access to the system or modify data i...

CVE-2018-7276

The CVE-2018-7276 issue affects Lutron Quantum BACnet Integration 2.0 devices (firmware 3.2.243). The vulnerability is an information disclosure: a remote attacker can obtain potentially sensitive data via a /DbXmlInfo.xml request, demonstrated by access to Latitude/Longitude coordinates. Sources...

CVE-2017-7276

TOPdesk is affected by a reflected Cross-Site Scripting (XSS) vulnerability reported as CVE-2017-7276. The issue affects TOPdesk before version 5.7.6, earlier 6.x releases, and 7.x releases before 7.03.019. The connected sources confirm a reflected XSS vector in the web interface, but do not prov...

CVE-2016-7276

CVE-2016-7276 affects multiple Microsoft Office products (Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, Office 2016 for Mac). The vulnerability is an information disclosure/denial condition caused by an out-of-bounds read in memory when processing crafted Office document...

Microsoft Office CVE-2016-7276 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2016 for Mac Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service...

Microsoft Office Information Disclosure (MS16-148: CVE-2016-7276)

An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an improper handling of malformed embedded fonts. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

CVE-2013-7276

The CVE-2013-7276 entry concerns the WordPress plugin “Recommend to a friend” (plugin version 2.0.2) with a reflected XSS in inc/raf_form.php via the current_url parameter. The underlying cause is that user-supplied current_url is reflected, allowing remote attackers to inject arbitrary script/HT...

CVE-2008-7276

Kernel/System/Web/Request.pm in Open Ticket Request System OTRS before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal val...

CVE-2008-7276

Kernel/System/Web/Request.pm in Open Ticket Request System OTRS before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal val...

CVE-2008-7276

Vulnerability details (CVE-2008-7276) : Open Ticket Request System (OTRS) prior to 2.3.2 is affected. The module Kernel/System/Web/Request.pm creates a directory under /tmp/ with overly permissive mode (1274), which can let local users bypass access restrictions due to incorrect interpretation of...