CVE-2018-17928

The product CMS-770 Software Versions 1.7.1 and prioris vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism...

ABB CMS-770

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable from an adjacent network/low skill level to exploit Vendor: ABB Equipment: CMS-770 Vulnerabilities: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to read sensitive...

topglove.com XSS vulnerability

Vulnerable URL: http://www.topglove.com/search-fs-770/?keyword=...

Amazon Linux AMI : openssh (ALAS-2016-770)

It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program. In configurations with UseLogin=yes and the pamenv PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary code as root. C Tenab...

OLX: Reflective XSS at m.olx.ph

URL https://m.olx.ph/mobile-phones-tablets/ph-'alert1'%3E%3Cimg%20src=x%3Easdf?q=qwerty Injection happens on lines 769, 770 and repeated also at 1005, 1006 urlNoCategory = '/ph-'alert1'%3E%3Cimg%20src=x%3Easdf?q=qwerty'; urlNoLocation =...

Linux/x86 - zsh Reverse TCP Shellcode port 9090 (80 bytes)

/ ; ; Linux x86 ; Author: thryb ; Date: 21-07-16 ; Purpose: Reverse /bin/zsh to TCP port 9090 ; Size: 80 bytes ; ID: SLAE-770 ; Git: https://www.github.com/thryb/SLAE-770 ; global start section .text start: xor eax, eax ; cleaning registers xor ebx, ebx ; 1 - create socket ; socketAFINET,...

Linux/x86 - zsh TCP Bind Shell Port 9090 (96 bytes)

/ ; ; Linux x86 ; Author: thryb ; Date: 13-07-16 ; Purpose: Bind /bin/zsh to TCP port 9090 ; Size: 96 bytes ; ID: SLAE-770 ; Git: https://www.github.com/thryb/SLAE-770 ; global start section .text start: xor eax, eax ; cleaning registers for sanity xor ebx, ebx xor edx, edx xor edi, edi ; 1 -...

770.com Open Redirect vulnerability

Vulnerable URL: http://www.770.com/redirection.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 21145805 Google Pagerank| 6 VIP website...

Code injection

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

CVE-2013-6306

CVE-2013-6306 concerns IBM Power 7 Systems (740 before 740.70 01Ax740_121; 760 before 760.40 Ax760_078; 770 before 770.30 01Ax770_062). The vulnerability allows local users to gain Service Processor privileges via unknown vectors. No root-cause, vector, or remediation details are provided beyond ...

Firefox XMLSerializer Use After Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firefox...

Ubuntu: Security Advisory (USN-770-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 770-1 (gopher)

The remote host is missing an update to gopher announced via advisory DSA 770-1. John Goerzen discovered that gopher, a client for the Gopher Distributed Hypertext protocol, creates temporary files in an insecure fashion. For the old stable distribution woody this problem has been fixed in versio...

Debian: Security Advisory (DSA-770-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-770-1 : gopher - insecure tmpfile creating

John Goerzen discovered that gopher, a client for the Gopher Distributed Hypertext protocol, creates temporary files in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...