95 matches found
CVE-2017-18530: Improper Neutralization of Input During Web Page Generation
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...
CVE-2017-18501
The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...
CVE-2017-18501
The CVE-2017-18501 entry concerns the WordPress plugin Social Login by BestWebSoft (social-login-bws) before version 0.2, which contains multiple XSS flaws. The Nuclei template and related references describe cross-site scripting flaws in this plugin, enabling an attacker with authenticated acces...
CVE-2017-18501: Improper Neutralization of Input During Web Page Generation
The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...
BWS Systems HA-Bridge Remote Detection
Detection of BWS Systems HA-Bridge. The script sends a HTTP connection request to the remote host and attempts to detect if the remote host is BWS Systems HA-Bridge. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
BWS Systems HA-Bridge Device Information Disclosure Vulnerability
BWS Systems HA-Bridge devices are a product for automating the connection and control of IoT devices. A security vulnerability exists in the BWS Systems HA-Bridge devices. A remote attacker could exploit this vulnerability by sending a direct request to the ! /system URI to obtain sensitive...
CVE-2018-12923
BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...
Information disclosure
BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...
CVE-2018-12923
CVE-2018-12923 : The BWS Systems HA-Bridge devices are vulnerable to an information-disclosure issue where a remote attacker can obtain sensitive information by issuing a direct request to the #!/system URI. The available documents identify this as a vulnerability in the HA-Bridge, describing the...
CVE-2018-12923
BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...
CVE-2018-12923: Exposure of Sensitive Information to an Unauthorized Actor
BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...
BWS Systems HA-Bridge is Bridge Application for IoTAnd They do not require any certification
BWS Systems HA-Bridge is Bridge Application for IoTAnd They do not require any certification There are 607 HA-Bridge had Exposed on the internet in ZoomEye : https://www.zoomeye.org/searchResult?q=%22HA%20Bridge%22 Bridge Device list unauth acceess Bridge Settings page http://xx.xx.xx.xx/!/system...
CVE-2004-2121
CVE-2004-2121 affects Borland Web Server (BWS) 1.0b3 and earlier. It exposes directory-traversal vulnerabilities through untrusted URL sequences (e.g., multiple dots '......' or encoded '..') that allow remote attackers to read/download arbitrary files. No exploitation details or fixes are provid...
CVE-2004-2121: Undefined Security Weakness
Multiple directory traversal vulnerabilities in Borland Web Server BWS 1.0b3 and earlier allow remote attackers to read and download arbitrary files via 1 multi-dot "......" sequences, or 2 "%5c%2e%2e" encoded ".." sequences, in the URL...
BWStraversal.txt
Application: BWS Borland Web Server / Corel Paradox Vendors: http://www.Borland.com http://www.Corel.com Corporate mergers confuses the specified vendor. Versions: = 1.0b3 Platforms: Windows Bug: Directory Transversal Vulnerability Risk: High Exploitation: remote with browser Date: 24 Jan 2004...