Optergy BMS 2.0.3a Remote Root

!/usr/bin/env python Unauthenticated Remote Root Exploit in Optergy BMS Console Backdoor Affected version \n' sys.exit while True: challengeurl = 'http://'+sys.argv1+'/tools/ajax/ConsoleResult.html?get' try: req1 = requests.getchallengeurl getchallenge = json.loadsreq1.text challenge =...

CVE-2015-7276

CVE-2015-7276 : Affected devices are Technicolor C2000T and C2100T that use hard-coded cryptographic keys. Root cause is hard-coded keys embedded in the devices, which can enable impersonation or man-in-the-middle via captured credentials or certificates. CVSS metrics indicate unauthenticated net...

CVE-2019-7276

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console...

CVE-2019-7276

Optergy Proton/Enterprise BMS is affected by CVE-2019-7276: unauthenticated remote code execution via a backdoor console. Public details show an undocumented backdoor script (Console.jsp) in the tools directory that enables full root access on vulnerable versions (notably 2.0.3a and earlier). Exp...

SSL / TLS Certificate Known Hard Coded Private Keys

The remote host is running a service that is using a publicly known SSL / TLS private key. An attacker may use this key to decrypt intercepted traffic between users and the device. A remote attacker can also perform a man-in-the-middle attack in order to gain access to the system or modify data i...

CVE-2018-7276

The CVE-2018-7276 issue affects Lutron Quantum BACnet Integration 2.0 devices (firmware 3.2.243). The vulnerability is an information disclosure: a remote attacker can obtain potentially sensitive data via a /DbXmlInfo.xml request, demonstrated by access to Latitude/Longitude coordinates. Sources...

CVE-2017-7276

TOPdesk is affected by a reflected Cross-Site Scripting (XSS) vulnerability reported as CVE-2017-7276. The issue affects TOPdesk before version 5.7.6, earlier 6.x releases, and 7.x releases before 7.03.019. The connected sources confirm a reflected XSS vector in the web interface, but do not prov...

CVE-2016-7276

CVE-2016-7276 affects multiple Microsoft Office products (Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, Office 2016 for Mac). The vulnerability is an information disclosure/denial condition caused by an out-of-bounds read in memory when processing crafted Office document...

Microsoft Office Information Disclosure (MS16-148: CVE-2016-7276)

An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an improper handling of malformed embedded fonts. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Office CVE-2016-7276 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2016 for Mac Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service...

CVE-2013-7276

The CVE-2013-7276 entry concerns the WordPress plugin “Recommend to a friend” (plugin version 2.0.2) with a reflected XSS in inc/raf_form.php via the current_url parameter. The underlying cause is that user-supplied current_url is reflected, allowing remote attackers to inject arbitrary script/HT...

CVE-2008-7276

Kernel/System/Web/Request.pm in Open Ticket Request System OTRS before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal val...

CVE-2008-7276

Kernel/System/Web/Request.pm in Open Ticket Request System OTRS before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal val...

CVE-2008-7276

Vulnerability details (CVE-2008-7276) : Open Ticket Request System (OTRS) prior to 2.3.2 is affected. The module Kernel/System/Web/Request.pm creates a directory under /tmp/ with overly permissive mode (1274), which can let local users bypass access restrictions due to incorrect interpretation of...