PT-2021-9835

Name of the Vulnerable Software and Affected Versions SpinetiX HMP350 versions 4.5.2-1.0.36229 and earlier SpinetiX HMP300 versions 4.5.2-1.0.36229 and earlier SpinetiX DiVA versions 4.5.2-1.0.36229 and earlier SpinetiX HMP400 versions 4.5.2-1.0.2-1eb2ffbd and earlier SpinetiX HMP400W versions...

CVE-2020-15809: Improper Limitation of a Pathname to a Restricted Directory

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd...

diva-center.hu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1168661 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

diva-keramika.ru XSS vulnerability

Open Bug Bounty ID: OBB-433874 Description| Value ---|--- Affected Website:| diva-keramika.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Hackers leak WhatsApp chat and private photos of WWE Diva Paige

By Carolina In March this year, x-rated photos and videos of WWE This is a post from HackRead.com Read the original post: Hackers leak WhatsApp chat and private photos of WWE Diva Paige...

Fashion Diva: Dressup & Makeup - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Diva: Dressup & Makeup published at the 'play' market has multiple vulnerabilities...

CVE-2014-9575

CVE-2014-9575 affects VDG Security SENSE (formerly DIVA) before 2.3.15. A crafted encoded colon in the Authorization header allows remote attackers to bypass authentication and read/modify arbitrary plugin settings. Remediation: upgrade to 2.3.16 (or later) per available changelog. The reports co...

CVE-2014-9577

Affected product/variant: VDG Security SENSE (formerly DIVA) version 2.3.13. Vulnerability type: information disclosure via the login process. Root cause / mechanism: the system sends the user database during login, enabling an authenticated remote user to read the response over TCP port 51410. I...

CVE-2014-9579

CVE-2014-9579 affects VDG Security SENSE (formerly DIVA) 2.3.13. The vulnerability is an information disclosure where administrator credentials are stored in cleartext and can be obtained by reading the plugin configuration files. The issue stems from storing sensitive credentials in an insecure ...

CVE-2014-9578

VDG Security SENSE formerly DIVA 2.3.13 performs authentication with a password hash instead of a password, which allows remote attackers to gain login access by leveraging knowledge of a password hash...

Multiple Buffer Overflow Vulnerabilities in VDG Security SENSE

VDG Security SENSE is a video management system. Multiple buffer overflow vulnerabilities in the VDG Security SENSE DIVA web service API allow remote attackers to submit a special AuthenticateUser request to execute arbitrary code via the user or password parameters...

CVE-2014-9451

Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...

CVE-2014-9451

Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...

CVE-2014-9451

VDG Security SENSE (formerly DIVA) 2.3.13 web service API /webservice has multiple stack-based buffer overflows in the AuthenticateUser API (user/password), enabling remote code execution. CVSSv2 base score 7.5 (HIGH). Some scanners mark remediation as WillNotFix; no explicit fixes detailed in th...

CVE-2014-9451: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...

PT-2015-4214

Name of the Vulnerable Software and Affected Versions VDG Security SENSE version 2.3.13 Description The issue concerns multiple stack-based buffer overflows in the DIVA web service API, specifically at the "/webservice" endpoint. This allows remote attackers to execute arbitrary code by...

Eicon Networks DIVA LAN ISDN Modem 1.0 Release 2.5/1.0/2.0 DoS

No description provided by source. source: http://www.securityfocus.com/bid/665/info A vulnerability in the Diva LAN ISDN Modem allows remote malicious users to lock up the modem requiring a hard reset. The vulnerability manifests itself when a remote users connects to the Diva HTTP port and send...

Facebook 'Like-jacking' Scams Expand

Facebook attacks that force users to unwittingly endorse scam pages keep spreading, researchers say. Attacks have now circulated that cause users to recommend pages promising naked pictures of alternative rock diva Hayley Williams or the phone number of heart-throb singer Justin Bieber. Read the...

IP Diva VPN SSL multiple security vulnerabilities

Unlimited number of passwords attempts, CSS...

CVE-1999-1533

Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service hang via a long password argument to the login.htm file in its HTTP service...