Default credentials

Trango Apex = 2.1.1, ApexLynx 2.0, ApexOrion 2.0, ApexPlus = 3.2.0, Giga = 2.6.1, GigaLynx 2.0, GigaOrion 2.0, GigaPlus = 3.2.3, GigaPro = 1.4.1, StrataLink 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software...

CVE-2016-10305

Trango Apex = 2.1.1, ApexLynx 2.0, ApexOrion 2.0, ApexPlus = 3.2.0, Giga = 2.6.1, GigaLynx 2.0, GigaOrion 2.0, GigaPlus = 3.2.3, GigaPro = 1.4.1, StrataLink 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software...

CVE-2016-10305

Trango Apex = 2.1.1, ApexLynx 2.0, ApexOrion 2.0, ApexPlus = 3.2.0, Giga = 2.6.1, GigaLynx 2.0, GigaOrion 2.0, GigaPlus = 3.2.3, GigaPro = 1.4.1, StrataLink 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software...

CVE-2016-10305

The CVE-2016-10305 entry affects Trango devices (Apex series, Giga/Strata lines) with a built-in hidden root account and a default password that was once stored in cleartext in a software update package on a Trango FTP server. This account can be accessed via SSH/TELNET and provides access to the...

Trango Systems Devices Detection

Detection of Trango Systems Devices The script sends a connection request to the server and attempts to detect the presence of Trango Systems Devices and to extract its version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Apex Launcher - Customized SSL, Exported ContentProvider, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Apex Launcher published at the 'play' market has multiple vulnerabilities...

communicate.apexhotels.co.uk XSS vulnerability

Vulnerable URL: https://communicate.apexhotels.co.uk/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Apache Apex: source code security analysis report

Several vulnerabilities were discovered in The Apache Software Foundation 'Apache Apex' software: Using XSL Transformation to Execute Any Code Missing Verification of Executable Files' Digital Signature when Executing them from Untrusted Sources HttpOnly Cookies Incorrect User Input Filtration wh...

CVE-2016-0333: IBM Trusteer Rapport/Apex code execution

CVE-2016-0333 describes a code-execution risk in IBM Trusteer Rapport/Apex where a user who downloads a malicious DLL and then launches the installer could cause the installer to load and execute code from that DLL. The root cause is the installation-time loading of external code via a crafted DL...

Oracle Application Express (APEX) / REST Data Services Listener Detection

Binary data oracleapexlistenerdetect.nbin...

SolarWinds Server and Application Monitor Apex Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

Oracle Application Express (Apex) CVE-2009-0981

Unprivileged database users can see Oracle Apex password hashes in FLOWS030000.WWVFLOWUSER. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detection script for multiple issues within Oracle Application Express 3.0...

Oracle Application Express (Apex) Detection

The remote host is running Oracle Application Express Apex. ---------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Oracle Application Express Detection on HTTP ports Version 1.1 ---------------------------------------------------- include"compat.inc"; if...

Oracle Application Express (Apex) CVE-2011-3525

An unspecified vulnerability in versions 3.2 and 4.0 of the Application Express Apex component of the Oracle Database Server allows remote, authenticated users to affect confidentiality, integrity, and availability, relating to the Apex developer user...

Oracle Application Express (Apex) Version Detection

The remote host is running Oracle Application Express Apex. -------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detect Oracle Application Express Version on Apex/HTTP ports Version 1.0...

Oracle Application Express (Apex) CVE-2010-0892

An unspecified vulnerability in version 3.2 of the Application Express component of Oracle Database Server allows remote attackers to affect integrity via unknown vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/...

Unfixed XSS vulnerability at www.vipjatt.com

Security researcher Omega Apex, has submitted on 26/12/2011 a cross-site-scripting XSS vulnerability affecting www.vipjatt.com, which at the time of submission ranked 44784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is...

CVE-2011-3525

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user...

Design/Logic Flaw

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user...

CVE-2011-3525

Oracle Application Express (APEX) in Oracle Database Server is affected by CVE-2011-3525. The Nessus entry for Oracle APEX CVE-2011-3525 describes an unspecified vulnerability in the APEX component that affects Oracle Database Server versions 3.2 and 4.0, allowing remote authenticated users to im...