amc-forum.de Cross Site Scripting vulnerability OBB-3405492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amc-forum.de Cross Site Scripting vulnerability OBB-3397056

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amc-parts.se Cross Site Scripting vulnerability OBB-3392459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amc-forum.de Cross Site Scripting vulnerability OBB-3192192

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-23843

The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows putting a password protection on configured devices to restrict access to the configuration of an AMC2. An attacker can circumvent this protection and make...

Bosch Amc2 访问控制错误漏洞

Bosch Amc2 is an access modular controller from Bosch, Germany. An access control error vulnerability exists in the Bosch AMC2 that stems from the Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe used to configure certain settings in the AMC2 device. The tools allow password protection...

amc-nh.org XSS vulnerability

Open Bug Bounty ID: OBB-609837 Description| Value ---|--- Affected Website:| amc-nh.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-14841: Unrestricted Upload of File with Dangerous Type

Mojoomla Annual Maintenance Contract AMC Management System allows Arbitrary File Upload in profilesetting image handling...

AMC Master Arbitrary File Upload

Exploit Title: Annual Maintenance Contract Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/amc-master-annual-maintenance-contract-management-system/20667703 Demo:...

CVE-2017-14841

CVE-2017-14841 affects Mojoomla AMC Management System; the profilesetting image handling has an Arbitrary File Upload vulnerability, allowing upload of arbitrary files. This is corroborated by NVD (CVE-2017-14841) and CNVD/CVEs, with Exploit-DB listing a PoC. CVSS v2 base 4.0 (MEDIUM) and CVSS v3...

PT-2017-13718

Name of the Vulnerable Software and Affected Versions Mojoomla Annual Maintenance Contract AMC Management System affected versions not specified Description The issue concerns the handling of profile setting images, allowing for arbitrary file uploads. Recommendations At the moment, there is no...

AMC Master - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Annual Maintenance Contract Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link:...

AMC Security - Antivirus Boost - Customized SSL, Runtime privilege escalation, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application AMC Security - Antivirus Boost published at the 'play' market has multiple vulnerabilities...

CVE-2014-5646

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5646

The CVE-2014-5646 entry concerns the AMC Security- Antivirus, Clean (com.iobit.mobilecare) app for Android (version 4.4.1). The vulnerability is that the application does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-5646: Undefined Security Weakness

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6631

Name of the Vulnerable Software and Affected Versions AMC Security- Antivirus, Clean aka com.iobit.mobilecare version 4.4.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.50...

CVE-2013-3543

The CVE-2013-3543 entry affects the AXIS Media Control ActiveX (AxisMediaControlEmb.dll) version 6.2.10.11 used in AXIS network cameras. The vulnerability allows remote attackers to write arbitrary files by supplying file paths to the StartRecord, SaveCurrentImage, or StartRecordMedia methods, le...

PT-2013-4472

Name of the Vulnerable Software and Affected Versions AXIS Media Control AMC ActiveX control AxisMediaControlEmb.dll version 6.2.10.11 Description The issue allows remote attackers to create or overwrite arbitrary files. This can be achieved by providing a file path to certain methods, specifical...