6177 matches found
air-ventures.co.za XSS vulnerability
Vulnerable URL: http://www.air-ventures.co.za/unsubscribe.asp?email="'--! Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3114996 VIP website status:| No...
Huawei P9 Input Checksum Vulnerability
Huawei P9 is a smartphone from Huawei. The Huawei P9 suffers from an input validation vulnerability, which can be exploited by an attacker to send a forged air-port message to the affected product via a spoofed base station. Due to insufficient checksums on certain fields in the message, an...
Security Advisory - Insufficient Input Validation Vulnerability in Some Huawei Products
Some Huawei products have an insufficient input validation vulnerability. An unauthenticated attacker could send a forged air interface message to an affected product through a rogue base station. Due to insufficient input validation, the attacker could exploit this vulnerability to tamper with a...
Multiple Jensen of Scandinavia Air:Link Cross-Site Request Forgery Vulnerabilities
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. A cross-site request forgery in vulnerability exists in multiple Jensen of Scandinavia Air:Link products/goform/ pages. This allows remote attackers to construct malicious URIs and trick users into...
Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...
Multiple Jensen of Scandinavia Air:Link Information Disclosure Vulnerabilities
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An information disclosure vulnerability exists in multiple Jensen of Scandinavia Air:Link products. The vulnerability allows remote attackers to submit a special request to read passwords...
Multiple Jensen of Scandinavia Air:Link Command Execution Vulnerabilities
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. A command execution vulnerability exists in the /goform/ page of multiple Jensen of Scandinavia Air:Link products. A remote attacker could use this vulnerability to submit special shell metacharacters to...
Multiple Jensen of Scandinavia Air:Link 'return-url' parameter open redirect vulnerability
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'return-url' parameter on the /goform/formLogout page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a maliciou...
Millions Of Smartphones Using Broadcom Wi-Fi Chip Can Be Hacked Over-the-Air
Millions of smartphones and smart gadgets, including Apple iOS and many Android handsets from various manufacturers, equipped with Broadcom Wifi chips are vulnerable to over-the-air hijacking without any user interaction. Just yesterday, Apple rushed out an emergency iOS 10.3.1 patch update to...
CVE-2016-10315
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...
CVE-2016-10312
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...
CVE-2016-10313
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...
CVE-2016-10314
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...
CVE-2016-10316
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...
Aviation-Related Phishing Campaigns Seeking Credentials
A wave of email-based phishing campaigns is targeting airline consumers with messages that contain malware that infects systems or links to spoofed airline websites that are personalized to trick victims into handing over personal or business credentials. “Over the past several weeks, we have see...
CVE-2016-10273
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary code or crash the web service via the 1...
Norwegian Air Shuttle airline kiosk authentication bypass vulnerability vulnerability
The Norwegian Air Shuttle airline kiosk is a series of self-service kiosks for Norwegian Air. An authentication bypass vulnerability exists in the Norwegian Air Shuttle airline kiosk. An attacker could exploit this vulnerability to gain administrator access and network access to the underlying...
CVE-2017-6397
An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several -sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...
Air Transfer Cross-Site Scripting Vulnerability
Air Transfer Pro is an application for transferring files from your computer to your cell phone over a wireless network. Air Transfer suffers from a cross-site scripting vulnerability that allows remote attackers to exploit exploits to inject script code into client application requests with...
